Dark Project
Threat actorSecurity timeline
- Named in ransomware reports by Cyber Security NewsDark Project ransomware group recruits affiliates with 80% revenue share
- Named in ransomware reports by GBHackersDark Project ransomware gang claims 38 victims across eight countries
Recent news
Dark Project ransomware group recruits affiliates with 80% revenue share
Dark Project, first observed in June 2026, runs a ransomware-as-a-service partner programme with an 80/20 affiliate split, according to Gurucul. Its leak site lists 38 victims across eight countries, 30 of them in the United States, mainly in manufacturing, healthcare and construction. Initial access is reportedly gained through phishing, exposed RDP, compromised credentials and VPN access from infostealer logs or initial access brokers, with double extortion of Windows environments.
Dark Project ransomware gang claims 38 victims across eight countries
Dark Project, a financially motivated ransomware operation, has claimed 38 victims across eight countries, with manufacturing and healthcare most heavily affected. The group combines data theft, encryption and public disclosure threats, and runs an affiliate programme to scale intrusions. These figures are the group's own allegations, not independently confirmed.