Exposing The Hacktivist Group CyberVolk And Their Affiliations

CyberVolk an India-based hacktivist group with pro-Russia ideologies has targeted public and government entities since at least June of 2024 using ransomware and DDoS attack operations to advance Russian geopolitical interests. They leverage a ransomware-as-a-service (RaaS) model and employ tools based on other public and traded codebase like the AzzaSec ransomware HexaLocker and Parano. Their attacks featured advanced encryption techniques quick pivoting among malware families and active promotion via Telegram and X. The collective demonstrated dynamic tactics among highly volatile and some loyal affiliations.