Australia

cuba

The Cuba Ransomware, also known as Colddraw Ransomware, was first identified in the threat landscape in 2019 and built a relatively small but selected list of victims. The group is also known as Fidel Ransomware, due to a characteristic marker placed at the beginning of all encrypted files. This file marker is used as an indicator for the ransomware and its decoder that the file has been encrypted.<br> <br> Despite its name and the Cuban nationalist style on its leak…

First seen 2021-02-03 · Last seen 2024-02-01 · 1 Australia claims

Tactics: Initial Access, Execution, Defense Evasion, Credential Access, Discovery, Lateral Movement, Command and Control

Cached from ransomware.live. 2026-09-19 PT. Leak sites are not linked.