Encore, encore, encore … un nouveau groupe ransomware : SovCali

A new ransomware group, SovCali, has emerged, claiming to possess data from Lucid Motors and threatening to release 35 gigabytes of stolen information unless a private negotiation is established. SovCali operates by offering to negotiate directly with victims, avoiding intermediaries and promising not to disrupt operations or leak data unless a deal is reached. The group’s strategy involves a dual approach: presenting itself as a neutral, commercial actor while simultaneously threatening data publication to pressure targets into private discussions. This tactic is a common one among ransomware groups.