RansomedVC is presented in the provided reporting as a purported ransomware/data-leak extortion operation associated with fictitious or unverified breach claims rather than a clearly validated ransomware campaign. The content places it alongside other cybercrime scam or impersonation efforts and cites reporting from Jon DiMaggio of Analyst1 that, in 2023, RansomedVC claimed to have stolen customers’ personally identifiable information from State Farm Insurance and from NTT Docomo, but the purported stolen datasets in those cases were assessed to be entirely fictitious and used in attempted extortion. Separate reporting referenced in the content states that RansomedVC later reappeared after a hiatus and leaked Medusa-related data/chats. High-confidence details in the source do not confirm a functioning ransomware executable, specific infection vector, ransom note, or technical indicators of compromise for RansomedVC. Based on the provided content, the most defensible characterization is that RansomedVC operated as a named extortion or leak-brand making false or unverified data-theft claims, including claims involving customer PII, with no validated breach evidence included here.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A named extortion/scam actor referenced for making fictitious data-theft claims to pressure organizations; not described as a specific malware family in the content.
Ransomware group noted for returning after a hiatus and leaking data (including internal chats) from another ransomware group (Medusa).
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.