Ransomware Group
Quantum
Quantum ransomware, active from mid-2021 through 2022, was a rebrand of the MountLocker/AstroLocker/XingLocker lineage that operated as RaaS, known for extremely fast attack timelines (under four hours from initial access to encryption) and ransom demands ranging from $150,000 to multi-million dollars.
Known victims68
Threat level
MEDIUM
Get an alert if one of your domains is named on a ransomware leak site.
Monitor your domainsFree account · up to 5 monitored targets
Tactics, Techniques & Procedures (TTPs)
CredentialTheft
- Mimikatz
- ProcDump
DiscoveryEnum
- AdFind
Exfiltration
- MEGA
- RClone
LOLBAS
- PsExec
- WMIC
Offsec
- Cobalt Strike
RMM-Tools
- AnyDesk
- Atera
- RSAT
- Splashtop
Known infrastructure
The following Tor hidden services have been associated with this group:
Secure ChatQuantum Blog
These sites are malicious. Open them only from an isolated environment.
Check if you’re affected
Look up your domain to see whether it appears on Quantum’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request