Intel Name: Fog ransomware spread by cybercriminals claiming ties to doge
Date of Scan: April 21, 2025
Impact: High
Summary: FOG ransomware is being spread by cybercriminals claiming ties to the Department of Government Efficiency (DOGE). Nine samples with the “.flocked” extension were found, dropping notes urging further spread and referencing DOGE and an FBI-related incident. The active ransomware group has claimed 100 victims since January 2025, mainly targeting tech, education, manufacturing, and transportation sectors. Some campaigns may be impersonators using FOG ransomware to mimic the original operators.
