Luna Moth Ransomware: The Threat Actors Behind Recent False Subscription Scams

Sygnia’s team identified ‘Luna Moth’ ransom group. The threat actors resemble false subscription scammers, focusing on corporate data theft.

Oren Biderman, Tomer Lahiyani, Noam Lifshitz, Ori Porag

1 July 2022

8 min

Over the last few months, Sygnia’s Incident Response team has been methodically tracking the ‘Luna Moth’ ransom group. Their modus-operandi resembles scammers, with the twist of corporate data theft, leveraging the threat of publication to demand millions of dollars in ransom.

key points

The Sygnia Incident Response team identified a relatively new threat group, which has been operating since the end of March 2022. Sygni…