Gurucul
CompanyThreat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Named in ransomware reports by Cyber Security NewsDark Project ransomware group recruits affiliates with 80% revenue share
Recent news
Dark Project ransomware group recruits affiliates with 80% revenue share
Dark Project, first observed in June 2026, runs a ransomware-as-a-service partner programme with an 80/20 affiliate split, according to Gurucul. Its leak site lists 38 victims across eight countries, 30 of them in the United States, mainly in manufacturing, healthcare and construction. Initial access is reportedly gained through phishing, exposed RDP, compromised credentials and VPN access from infostealer logs or initial access brokers, with double extortion of Windows environments.