Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

The hacktivist group Twelve has been conducting destructive cyberattacks against Russian targets using public tools. Formed in April 2023 during the Russo-Ukrainian war, the group aims to cripple networks and disrupt business operations. Rather than demand ransom, they encrypt victims’ data and destroy their infrastructure. They also leak sensitive information on their Telegram channel. The group is potentially linked to ransomware group DARKSTAR due to infrastructural and tactical overlaps.