SunCrypt Gang - Threat Group Cards: A Threat Actor
Encyclopedia
Archived: 2026-04-05 13:35:13 UTC
Home > List all groups > SunCrypt Gang
 APT group: SunCrypt Gang
Names SunCrypt Gang (?)
Country [Unknown]
Motivation Financial gain
First seen 2019
Description
(Acronis) This ransomware family was first spotted in October 2019, but it was not
very active at that time. The group behind it was independent in the beginning, but
they recently joined the so-called Maze cartel – combining forces to rob individuals
and companies around the world.
Observed
Tools used SunCrypt, WARPRISM.
Operations performed
May 2020
MU Health Care Phishing Attack Impacts 5,000 Patients
Aug 2020
SunCrypt Ransomware shuts down North Carolina school district
Aug 2020
SunCrypt Ransomware sheds light on the Maze ransomware cartel
Sep 2020
University Hospital New Jersey hit by SunCrypt ransomware, data
leaked
Sep 2020 Ransomware gangs add DDoS attacks to their extortion arsenal

gangs-add-ddos-attacks-to-their-extortion-arsenal/>
Oct 2020
Ransomware gang attacks Texas unit of global steel conglomerate
Information
Last change to this card: 15 May 2021
Download this actor card in PDF or JSON format
Source: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=e2ecfc72-93c2-4b6c-8edc-001b2b87261b
https://apt.etda.or.th/cgi-bin/showcard.cgi?u=e2ecfc72-93c2-4b6c-8edc-001b2b87261b
Page 2 of 2