Dark Power
Attribution profile
- Type
- Criminal
- Location
- Russia
- Known incidents
- 1 incident
- Sources
- 1 source
- First seen
- 2023-03-09
- Last seen
- 2023-03-09
- Updated
- 2026-10-03 00:05
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Dark Power is a ransomware group operating under the alias Dark Power, with a known location in Russia. The group maintains a leak site and invites contact via the Tox messaging platform to download purportedly stolen data. In March 2023, Dark Power claimed responsibility for an attack on Peru’s Autoridad para la Reconstrucción con Cambios (ARCC), a reconstruction agency, and posted the agency’s name on its leak site. Although the group offered data access through Tox, it was not online when contacted, providing no interactive communication channels and hindering independent verification of the claimed compromise. No further details about its malware families, initial access vectors, broader targeting patterns, or affiliations are provided in the available sources.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 1 source.