The DoppelPaymer crew are responsible for extorting tens of millions of dollars from over 40 companies in Germany and the US, including the University Hospital in Düsseldorf, where a patient died due to the ransomware attack.
The criminals use a ‘double-extortion’ technique where they threaten to publish sensitive stolen data, as well as locking the data up through the encrypting malware. The gang is also known as Indrik Spider, Double Spider and Grief.