ALPHV, also known as BlackCat, was a sophisticated Rust-based ransomware-as-a-service operation notable for high-profile attacks on healthcare and critical sectors.

Key facts

• One of the first major ransomware families written in Rust, making it cross-platform and harder to detect.
• Ran a slick affiliate program and pioneered tactics such as a searchable leak site for stolen data.
• Linked to the attack on Change Healthcare, one of the most disruptive healthcare incidents in US history.
• Collapsed in 2024 amid an apparent exit scam and law-enforcement pressure, with affiliates migrating to other groups.

Why it matters

BlackCat showed how a single affiliate can cause nationwide disruption. Its demise scattered experienced affiliates across newer brands, keeping the overall threat high.

How DarkThreatX helps

DarkThreatX monitors dark web leak sites, forums and marketplaces for activity and data tied to your organisation, so you can respond before exposure becomes a breach. Run a free dark web scan or explore the platform.