HellCat and Morpheus: Two Brands, One Payload as Ransomware Affiliates Drop Identical Code

HellCat emerged in mid-2024. The primary operators behind HellCat are high-ranking members of the BreachForums. Morpheus RaaS launched a data leaks site (DLS) in December 2024, though the group’s activity can be traced back to at least September.