Uptime Hamster: 31d 7h 1mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
Logo del actor de amenaza sugar

sugar

2 incidentes 1 paises 0 sectores ransomware RU Ultimo: 2026-06-29
Aliases: Encoded01, APT REAPER
Ver en IntelTracker → APTTrail →
Sugar is a Ransomware-as-a-Service (RaaS) operation that first emerged in November 2021. Unlike most ransomware groups that target large enterprises, Sugar specifically focuses on individuals and small to medium-sized businesses, demanding relatively low ransom amounts based on the number of encrypted files. The group, also known by the aliases Encoded01 and SugarLocker, primarily operates using malware written in Delphi. Between December 2024 and January 2025, the operators behind Sugar were observed deploying a re-branded version of their payload known as "Starpoint," which is functionally identical to the original Sugar ransomware.

Aliases del actor

Encoded01APT REAPER

Actores similares

apt-reaperactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / onionunknownchat5sqrnzqewampznybomgn4hf2m53tybkarxk4sfaktwt7oqpkcvyd.onionsugar
DLS / leak siteunknownwww.breachsense.comfloridasugarcaneleague.org - Hive Data Breach
DLS / leak siteunknownduckduckgo.comfloridasugarcaneleague.org - Hive Data Breach
DLS / leak siteunknownduckduckgo.comfloridasugarcaneleague.org - Hive Data Breach
DLS / leak siteunknowngetbootstrap.comfloridasugarcaneleague.org - Hive Data Breach
DLS / leak siteunknownransomware.anggipradana.comRansomware Group: sugar
DLS / leak sitedownwww.abc.net.auRansomware News: Cyber security incident shuts down north Queensland sugar mills
Tecnicas MITRE
T1190, T1078.003, T1059.001, T1562.001
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Paises objetivo (SOCRadar)

CanadaGuyanaIsraelLithuaniaThailandUnited States

Sectores objetivo (SOCRadar)

Food ManufacturingOther Information ServicesEnterprises & HoldingManufacturingPublic AdministrationOil & GasEnergy & Utilities InsuranceTelecommunicationsRetail

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com