Coinfirm logo

Armada Collective Ransomware


Date: 14 Dec 2014

Estimated value: 500 000

The original Armada Collective first surfaced in 2015 with a series of attacks on banks, e-commerce sites, and hosting services in Russia, Thailand, and Switzerland. The group would send ransom demands to a few companies in a single industry demanding Bitcoin under the threat of a largescale DDoS attack. To demonstrate their power, they would launch a sample attack. If the ransom was not paid in the allotted time, the target would face a persistent, multi-vector attack.