Snatch

Inactive
Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.
142 Victims
Nov 28, 2021 First Discovered
May 14, 2024 Last Discovered
901 Days Inactive
0% Infostealer
0/5 Sites Online
Known Locations (5)
News
snatchteam.top
Access Denied
snatch.press
Origin DNS error snatchteam.cc Cloudflare
snatchteam.cc
Just a moment...
snatchnews.top
News
hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onion
Tools Used
LOLBAS
BCDEdit, ServiceControl (sc.exe)
Offsec
Cobalt Strike, Meterpreter
Intelligence
📄 1 Ransom Notes
View the actual ransom notes used by this group →
Victims (142)

Detailed victim list temporarily unavailable

This group has 142 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.

Source: Ransomware.live | Data cached and served by Digital Checkmark IT Services | Ransomware Tracker