New Dark Project Ransomware Group Offers Hackers 80% Commission to Expand Cyberattacks
Dark Project ransomware group recruits hackers with 80% commission offer and extortion platform.
Run Gurucul?
Get an email when a reviewed story names Gurucul, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A new ransomware group named Dark Project is actively recruiting affiliates by offering an 80% commission on successful attacks and providing a platform for managing extortion. First observed in June 2026, the group employs a double-extortion model, combining data theft and encryption with threats of public data leaks. Researchers have identified their recruitment process, infrastructure, and attack methods, noting a significant number of victims across multiple countries, with the United States being heavily targeted.
The lesson from this incident
Full lessonThe Dark Project ransomware group demonstrates how the Ransomware-as-a-Service (RaaS) model dramatically lowers the barrier to entry for cybercriminals by offering lucrative commissions and ready-made attack infrastructure. By combining data theft with encryption (double extortion), attackers gain two leverage points — victims must pay not just to restore systems but also to prevent sensitive data from being publicly leaked. This industrialized approach means organizations now face threats from a rapidly expanding pool of less-skilled but well-equipped affiliates. The heavy targeting of US organizations underscores that no sector is too small or too large to be a victim, and defenders must assume compromise is a matter of when, not if.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.