Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:53:44 UTC
Home > List all groups > List all tools > List all groups using tool TerraCrypt
 Tool: TerraCrypt
Names
TerraCrypt
PureLocker
Category Malware
Type Ransomware, Big Game Hunting
Description
(QuoINT) Similar to other GC MaaS tools, the TerraCrypt ransomware is written in PureBasic
code and shares key code similarities to TerraLoader. In October 2019, QuoINT became aware
of a new ransomware strain we internally track as TerraCrypt. In November 2019, researchers
at IBM X-Force and Intezer jointly released a blog post detailing the same ransomware strain,
which they dubbed PureLocker.
Information
Last change to this tool card: 13 July 2020
Download this tool card in JSON format
All groups using tool TerraCrypt
Changed Name Country Observed
APT groups
 Venom Spider, Golden Chickens 2017-Jan 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c31eb326-2feb-4d4c-938f-ce54e3aa3f30
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c31eb326-2feb-4d4c-938f-ce54e3aa3f30
Page 1 of 1