Alpha Ransomware Emerges From NetWalker Ashes

Alpha ransomware first appeared in February 2023 and has strong similarities to the now-defunct NetWalker ransomware. Analysis shows code overlap between Alpha and NetWalker payloads. Both use a PowerShell-based loader and have similar execution flows process/service killing logic and configuration details. After initially maintaining a low profile Alpha recently began scaling up attacks and launching a data leak site.