Ransomware
FunkSecFunkLocker
Attribution
Financially motivated with hacktivist framing (unattributed)
Origin
Unknown (operator assessed by Check Point as likely based in Algeria)
Motivation
Financially motivated (ransomware)
Attribution confidence
medium
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Why it mattersRansomware actor, medium confidence, documented targeting Egypt (Aviation sector).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.