morpheus
Known ransomware group ACTIVE Currently active
Morpheus emerged in late 2024 as a semi-private RaaS operation whose affiliates share identical payloads with the HellCat ransomware group, targeting pharmaceutical, manufacturing, legal, and Italian ESXi environments with ransom demands reaching up to 32 BTC (~$3M USD).
1
Total Claims
1
Critical
—
Records Claimed
1
Industries Hit
Active span: Jun 10, 2026 – Jun 10, 2026 · 1 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Jun 2026 (1)Jun 2026
LessMore
Jun 2026Top Targeted Industries
Financial Services 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
1
Known leak sites