“TommyLeaks” and “SchoolBoys” ransomware gangs are the same, researchers say

Share post:

Security experts said two new extortion gangs called “TommyLeaks” and “SchoolBoys” are the same ransomware gang.

TommyLeaks ransomware gang was uncovered by security researcher MalwareHunterTeam in September, while SchoolBoys ransomware gang was uncovered in October by the same researcher.

On why the two ransomware gangs are believed to be the same, the two groups used the same Tor chat system for their negotiation sites. The same chat system was previously only used by the Karakurt extortion group.

Also, in a SchoolBoys negotiation chat shared with BleepingComputer, the threat actors greeted their victim as “TommyLeaks” in their attempts to coerce a ransom payment.

It remains unclear why they use two different names in their operation although the researchers believe they may be trying a similar approach used by Conti and Karakurt.

TommyLeaks claims to break into corporate networks, steal data and demand ransoms between $400,000 and $700,000. SchoolBoys claims to steal data and encrypt victims’ devices as part of their attacks. Investigation also showed that SchoolBoys ransomware encryptor was created using the leaked LockBit 3.0 builder.

The sources for this piece include an article in BleepingComputer.

SUBSCRIBE NOW

Related articles

Cloudflare Launches Open Source Tool for Secure, Keyless SSH Authentication

Cloudflare has released an open-source tool called OPKSSH (OpenPubkey SSH), which allows developers and IT teams to use...

US Defence Contractor Fined 4.6 Million For Failing To Meet Cyber Security Requirements.

A U.S. defence contractor, MORSE Corp, has agreed to pay $4.6 million to settle allegations of failing to...

Tech Aide on U.S. Government Efficiency Team Linked to Cybercrime Group

A 19-year-old staffer working on the U.S. Department of Government Efficiency (DOGE) initiative has been linked to a...

Top U.S. Security Officials Have Even More Data Exposed Through Public Apps, Chats, and Data Leaks

A new investigation has revealed that personal information belonging to senior U.S. security officials — including active phone...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways