New Dark Project Ransomware Group Offers Hackers 80% Commission to Expand Cyberattacks
Dark Project ransomware group recruits hackers with 80% commission offer and extortion platform.
A new ransomware group named Dark Project is actively recruiting affiliates by offering an 80% commission on successful attacks and providing a platform for managing extortion. First observed in June 2026, the group employs a double-extortion model, combining data theft and encryption with threats of public data leaks. Researchers have identified their recruitment process, infrastructure, and attack methods, noting a significant number of victims across multiple countries, with the United States being heavily targeted.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Gurucul?
Get an email when a new story names Gurucul, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Dark Project ransomware group demonstrates how the Ransomware-as-a-Service (RaaS) model dramatically lowers the barrier to entry for cybercriminals by offering lucrative commissions and ready-made attack infrastructure. By combining data theft with encryption (double extortion), attackers gain two leverage points — victims must pay not just to restore systems but also to prevent sensitive data from being publicly leaked. This industrialized approach means organizations now face threats from a rapidly expanding pool of less-skilled but well-equipped affiliates. The heavy targeting of US organizations underscores that no sector is too small or too large to be a victim, and defenders must assume compromise is a matter of when, not if.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.