Parsing: enabled
Description
3AM, also known as ThreeAM, is a relatively new ransomware family that emerged in late 2023, initially deployed as a fallback option when LockBit infections failed. Written in Rust for 64-bit systems, it appends the “.threeamtime” extension to encrypted files and tags them with the marker “0x666,” while deleting Volume Shadow Copies to hinder recovery. 3AM operators use a double extortion strategy, combining file encryption with data theft and threats to leak stolen information. More recent campaigns have shown increased sophistication, incorporating email bombing followed by vishing calls to convince victims to grant remote access via Microsoft Quick Assist. Attackers then deploy virtual machines containing backdoors, allowing them to remain undetected while exfiltrating data before attempting to launch the ransomware payload.
External Analysis6
| External Analysis |
|---|
| https://security.com/threat-intelligence/3am-ransomware-lockbit |
| https://tripwire.com/state-of-security/3am-ransomware-what-you-need-know |
| https://news.sophos.com/en-us/2025/05/20/a-familiar-playbook-with-a-twist-3am-ransomware-actors-dropped-virtual-machine-with-vishing-and-quick-assist/ |
| https://quorumcyber.com/malware-reports/3am-ransomware-report/ |
| https://sos-vo.org/index.php/news/cybersecurity-snapshots-3am-ransomware |
| https://darkreading.com/threat-intelligence/3am-ransomware-adopts-email-bombing-vishing |
Ransom notes1
Mail1
| threeam@onionmail.org |
Urls1
| Url | ||||
|---|---|---|---|---|
| http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion | Up |
|
File servers1
| Url | ||||
|---|---|---|---|---|
| http://ulkvlj5sirgrbnvb4hvbjo2ex2c2ceqe2j4my57fcdozpbq5h5pyu7id.onion | Down |
|
Chat servers1
| Url | ||||
|---|---|---|---|---|
| http://threeam7fj33rv5twe5ll7gcrp3kkyyt6ez5stssixnuwh4v3csxdwqd.onion/ | Up |
|
Activity (interactive) 90
Posts90
| Date | Title | Description | Screen |
|---|---|---|---|
| jetmachprod.com | Jet Machined Products specializes in high-performance milled and turned components for the aerospace, instrumentation, robotics, and other specialized industries. With decades of experience, they focus on precision manufacturing to meet exacting t | ||
| jastrebarsko.hr | Town of Jastrebarsko, a historic city in Central Croatia located between Zagreb and Karlovac. | ||
| palmero.com | Palmero is a company dedicated to the manufacturing and marketing of capital goods, providing comprehensive solutions across various segments including energy, oil and gas, mining, agriculture, and construction. With 75 years of presence in Argent | ||
| insamani.com.ar | INSA INDELMA S.A. is a leading agro-industrial company in Argentina specializing in peanut production, exporting 80% of its output to over 30 countries worldwide. The company emphasizes quality through a comprehensive traceability system that ensu | ||
| bsynchro.com | BSynchro Holding is an insurtech software provider that specializes in innovative insurance solutions tailored for insurance companies, brokers, and reinsurance brokers. Their product offerings include advanced tools such as CORA for product confi | ||
| molinoscabodi.com.ar | Molinos Cabodi Hnos. S.A. has been providing high-quality flour products since 1853, including various types of flour such as Harina 000, Harina 000 Pan de Miga, and semolina. The company serves clients across the MERCOSUR region, offering persona | ||
| ws.com.br | WS Group Brasil is a Brazilian operations and business services provider engaged in logistics, technical support, contract administration, and labor-intensive service delivery. The company serves a mix of government, institutional, and commercial | ||
| consultic.be | ConsulTIC specializes in IT solutions, offering services such as application hosting, virtualization, telecommuting support, and security solutions. Their target clients include businesses seeking reliable, high-performance, and secure IT services | ||
| amc.org.au | The Australian Medical Council (AMC) is an independent national standards body responsible for the accreditation and assessment of medical education and training in Australia and New Zealand. Its primary purpose is to ensure that the standards of | ||
| agroexportavocados.com | Agro Industrial Exportadora SA de CV (AGRIEXP) is a Mexican holding company which is engaged in the food processing sector. Through its subsidiaries, the Company purchases, processes and sells fruit and vegetables. | ||
| hoplongtech.com | Công ty Cổ phần Công Nghệ Hợp Long is a leading distributor of automation equipment and industrial robotics solutions in Vietnam, representing brands such as Schneider Electric, Siemens, Omron, Veichi, NiSTRO, Leipole, and Universal Robots. They o | ||
| mgrlaw.com | Mogren, Glessner & Ahrens Law Firm is a full-service law firm located in King County, specializing in family law, divorce, probate, wills, criminal defense, personal injury, and adoption. Established in 1942, the firm is dedicated to providing com | ||
| aceforwarding.com | Ace Forwarding started out in 1994 as a small operation with a single truck picking up and delivering to and from the Detroit airport, fulfilling our customers time-critical shipments and becoming the go-to logistics operation when time was of the | ||
| ic-controls.com | Industrial Controls SAC, desde 1994 ofrece a nivel nacional, desarrollo e implementación de proyectos integrales y soluciones en electricidad, instrumentación, neumática y automatización industrial. Comprometidos con la calidad del trabajo que des | ||
| bun.nl | Bun creëert woon-, werk- en leefruimte voor iedereen en van de beste kwaliteit. Wij spelen in op zaken die leven in de maatschappij. De behoefte hierin aan woningen in is groot. Daarom houden wij ons bezig met de ontwikkeling en het renoveren van | ||
| hsjlawyers.com | Founded in 1971, HSJ Lawyers is a prominent law firm located in Prince George, British Columbia, serving the legal needs of clients throughout Northern BC. With a team of 15 lawyers and 25 staff members, the firm specializes in various areas including business law, family law, employment law, personal injury law, real estate, and criminal law. HSJ Lawyers is known for its community involvement and is recognized as one of the largest and most comprehensive law firms in the region. Their clientele includes both individuals and businesses seeking trusted, local, and experienced legal representation. |
|
|
| townofnorwell.net | The Town of Norwell MA offers a variety of municipal services including animal control, building permits, health clinics, and recreational programs. It serves the residents of Norwell by ensuring public safety, facilitating community events, and providing resources for aging individuals. The town focuses on promoting a multigenerational community through initiatives like the Community Center Project. Furthermore, Norwell is engaged in environmental conservation and provides housing and transportation services to its citizens. |
|
|
| curedentalbeltontx.com | Cure Dental is a company that operates in the Dental Offices industry. It employs 10to19 people and has 1Mto5M of revenue. The company is headquartered in Belton, Texas. |
|
|
| austinplasticandreconstructivesurgery.com | Austin Plastic Reconstructive Surgery, led by Board-Certified Plastic Surgeon Dr. Christine Fisher, specializes in breast reconstruction and a variety of cosmetic surgery procedures. The clinic caters to individuals seeking to enhance their beauty and restore confidence, particularly women recovering from breast cancer. Their offerings include breast, body, and facial procedures, as well as advanced medspa treatments for skin rejuvenation. The team is committed to providing personalized care and transformative results in a welcoming environment. |
|
|
| sequoiadental.com | Sequoia Dental Office provides a wide range of dental services including general, cosmetic, orthodontic, and restorative dentistry. Located in Visalia, CA, they are dedicated to patient comfort and use advanced technology to enhance care, offering | ||
| wyomingcountyny.gov |
|
||
| vazirilaw.com | |||
| gosvt.com |
|
||
| neffendorfblockercpa.com |
|
||
| jastreet.com |
|
||
| icmtx.com |
|
||
| dbhcares.com |
|
||
| icgad.com |
|
||
| iss-na.com |
|
||
| kkp.law |
|
||
| leonardo.com |
|
||
| sehma.com |
|
||
| corehandf.com |
|
||
| soitinlaine.fi |
|
||
| anwsd.org |
|
||
| hapsch.de |
|
||
| kuritaamerica.com |
|
||
| hobokennj.gov |
|
||
| midstatesindustrial.com |
|
||
| anuenterprise.com.au |
|
||
| inhometexas.com |
|
||
| caillau.com.br |
|
||
| sandray.com |
|
||
| mpspromotions.com |
|
||
| freedomhomecare.net |
|
||
| carolinaarthritis.com |
|
||
| sacredheart.southwark.sch.uk |
|
||
| oklahomasleepinstitute.com |
|
||
| oklahomasleepinstitute.co... |
|
||
| carlile-group.com |
|
||
| sacredheart.southwark.sch... |
|
||
| mctas.org.au |
|
||
| mnpl.com.sg |
|
||
| verco.co.uk |
|
||
| gestiriego.com |
|
||
| brunswickhospitalcenter.org |
|
||
| brunswickhospitalcenter.o... |
|
||
| visitingphysiciansnetwork... |
|
||
| compagniedephalsbourg.com... |
|
||
| thermalsolutionsllc.com |
|
||
| escriba.com.br |
|
||
| compagniedephalsbourg.com |
|
||
| kh.org |
|
||
| moore-tibbits.co.uk |
|
||
| mtmrobotics.com |
|
||
| abcor.com.au |
|
||
| doneff.com |
|
||
| garonproducts.com |
|
||
| etsolutions.com.mx |
|
||
| thecsi.com |
|
||
| pharrusa.com |
|
||
| shareharris.com |
|
||
| woodruffenterprises.com |
|
||
| syrtech.com |
|
||
| ussignandmill.com |
|
||
| carrellblanton.com |
|
||
| ds-granit.fr |
|
||
| nealbrothers.co.uk |
|
||
| maniland.co.uk |
|
||
| claimtek.com |
|
||
| simmonsequip.com |
|
||
| haciendazorita.com |
|
||
| fi-tech.com |
|
||
| neuraxpharm.com |
|
||
| pvbfabs.com |
|
||
| wdgroup.com.my |
|
||
| intechims.com |
|
||
| zero-pointorganics.com |
|
||
| visitingphysiciansnetwork.com |
|
||
| clearwaterlandscape.com |
|