Sable Group Extortion Ransomware operator or affiliate
cluster sable · North Korea
· 2 known address(es)
· ETH, BTC
Intrinsic severity9of 10
Default bandsevere
Attributionmoderate0.75 confidence
On-chain partyprincipal
Attribution quality
| Level | moderate |
| Source | synthetic |
| Basis | corroborated open-source intelligence |
Operator versus beneficiary
| Custody model | actor |
| On-chain party | principal |
| Beneficiary on-chain | yes |
Known addresses
0xf1f61ca62f0fc2...bc1q9v90kwdlpqur...
Service risk profile
This cluster is not a service, so there is no AML posture to profile. Risk for it comes from its category and its exposure, not from its controls.