Ransomware Group intelligence
Hunters
InactiveTrack Hunters with 308 published victims and 4 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Hunters is tracked by Breach House as a ransomware group with 308 published victims.
United States is currently the most targeted country in this dataset.
4 known leak locations are currently associated with this group.
Leak Status Distribution
308
- Leaked 2 0.6%
- Pending 306 99.4%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (4)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 3 | Onion service | Down checked 4h ago | hunters55atbdusuladzv7vzv6a423bkh6ksl2uftwrxyuarbzlfh7yd.onion |
| Leak location 4 | Web location | Down checked 4h ago | huntersinternational.org |
| Leak location 1 | Onion service | Down checked 4h ago | hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion |
| Leak location 2 | Onion service | Down checked 4h ago | hunters33mmcwww7ek7q5ndahul6nmzmrsumfs6aenicbqon6mxfiqyd.onion |
Top Activity Sectors (17)
- Not identified 99
- Public Sector 79
- Services 36
- Healthcare / Pharma 15
- Finance / Legal / Insurance 13
- IT 12
- Energy 11
- Communication / Marketing 10
- Manufacturing / Engineering 8
- Construction / Real Estate 7
- Hospitality / Food & Beverage / Tourism 5
- Transportation / Travel / Logistics 5
- Education 2
- Telecommunications 2
- Agriculture / Food 2
- Retail / E-commerce 1
- NGOs / Associations 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Hunters, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: hunters uses PowerShell scripts to execute malicious commands and deploy payloads across compromised systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: hunters modifies Registry Run Keys and startup folders to maintain persistence across reboots.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: hunters disables security tools and event logging mechanisms to hinder detection and forensic analysis.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: hunters deletes Volume Shadow Copies and backup directories via command-line utilities to prevent data recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1018 Remote System Discovery Discovery
What they do: hunters performs remote system discovery to identify additional targets and high-value assets for encryption.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1049 System Network Connections Discovery Discovery
What they do: hunters queries system network connections to identify active services and communication endpoints for targeting.
What that means: Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.
-
T1135 Network Share Discovery Discovery
What they do: hunters uses network share discovery to locate accessible SMB shares for lateral movement and victim data targeting.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: hunters leverages SMB/Windows Admin Shares for lateral movement between networked hosts within victim environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: hunters encrypts victim files using impact-oriented encryption routines to maximize disruption and ransom demand leverage.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1491.001 Internal Defacement Impact
What they do: hunters performs internal defacement by replacing victim files with custom content to demonstrate impact.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (4)
▼Software Hunters has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Discovery & enumeration
Advanced IP Scanner
Advanced Port Scanner
Exfiltration
RClone
WinSCP
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
READ ME NOW!.txt
1. WHAT HAPPENED? <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Your company's network has been compromised by the HUNTERS INTERNATIONAL group. All files are encrypted using a military-grade AES encryption algorithm. A large amount of sensitive data was exfiltrated. We usually download: - Employees personal data: CVs, DL, SSN, PII, NDA contracts, etc. - Financial information: documents, payrolls, bank statements, bills, transfers, budgets, annual reports, etc. - Customer data: contracts, PII, contacts, purchase agreements, etc. - Confidential: source code, trade secrets, technology, blueprints, documents, etc. - Work files, databases, legal documents, corporate correspondence. - Accounting data. - Audit reports. 2. WHAT DO WE OFFER <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< To prevent exfiltrated data from being disclosed and to decrypt all the files you need to make a payment. Contact us following the instructions: 1) Install and run “Tor Browser” from https://www.torproject.org/download/ 2) Go to a dedicated website: https://hunters33mmcwww7ek7q5ndahul6nmzmrsumfs6aenicbqon6mxfiqyd.onion/ https://hunters33dootzzwybhxyh6xnmumopeoza6u4hkontdqu7awnhmix7ad.onion/ (mirror) 3) Log in using the credentials: [snip]:[snip] 3. WHAT IF NOT? <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< We have the most powerful data leak site on the Internet. There are a lot of journalists, researchers and other hackers. https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/ https://huntersinternational.net/ (mirror) An incomplete list of risks you are facing in case of non-payment: - Loss of customer trust and loyalty. - Damage to the company's reputation. - Legal consequences and compliance fines. - Financial losses and costs associated with data recovery. - Impact on competitive advantage and market share. - Breach of data privacy regulations and laws. - Disruption of business operations. - Reduced employee morale and productivity. - Potential for intellectual property theft. - Loss of trade secrets and proprietary information. 4. KEEP IN MIND <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< - Do not try to decrypt using third-party software. You will damage the files. - Do not report to the Police, FBI, etc. They don't care about your business. They simply won't allow you to pay. As a result, you will lose everything. - Do not hire a recovery company. They can't decrypt without the key. They also don't care about your business. They believe that they are good negotiators, but it is not. They usually fail. So speak for yourself. - Do not reject to pay. Exfiltrated files will be disclosed right away.
Contact Us2.txt
_ _ _ _ _ _ _____ _____ ____ ____
| | | | | | | \ | |_ _| ____| _ \/ ___|
| |_| | | | | \| | | | | _| | |_) \___ \
| _ | |_| | |\ | | | | |___| _ < ___) |
|_|_|_|\___/|_|_\_|_|_|_|_____|_|_\_\____/____ ___ ___ _ _ _ _
|_ _| \ | |_ _| ____| _ \| \ | | / \|_ _|_ _/ _ \| \ | | / \ | |
| || \| | | | | _| | |_) | \| | / _ \ | | | | | | | \| | / _ \ | |
| || |\ | | | | |___| _ <| |\ |/ ___ \| | | | |_| | |\ |/ ___ \| |___
|___|_| \_| |_| |_____|_| \_\_| \_/_/ \_\_| |___\___/|_| \_/_/ \_\_____|
To contact us follow the instructions:
1) Install and run “Tor Browser” from https://www.torproject.org/download/
2) Go to https://hunters33mmcwww7ek7q5ndahul6nmzmrsumfs6aenicbqon6mxfiqyd.onion/
or https://hunters33dootzzwybhxyh6xnmumopeoza6u4hkontdqu7awnhmix7ad.onion/
3) Log in using the credentials: [snip]
---
Don't waste time. Inform your CEO about the incident ASAP. Show Data Leak Site:
https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/
or https://hunters55atbdusuladzv7vzv6a423bkh6ksl2uftwrxyuarbzlfh7yd.onion/
Contact Us.txt
_ _ _ _ _ _ _____ _____ ____ ____
| | | | | | | \ | |_ _| ____| _ \/ ___|
| |_| | | | | \| | | | | _| | |_) \___ \
| _ | |_| | |\ | | | | |___| _ < ___) |
|_|_|_|\___/|_|_\_|_|_|_|_____|_|_\_\____/____ ___ ___ _ _ _ _
|_ _| \ | |_ _| ____| _ \| \ | | / \|_ _|_ _/ _ \| \ | | / \ | |
| || \| | | | | _| | |_) | \| | / _ \ | | | | | | | \| | / _ \ | |
| || |\ | | | | |___| _ <| |\ |/ ___ \| | | | |_| | |\ |/ ___ \| |___
|___|_| \_| |_| |_____|_| \_\_| \_/_/ \_\_| |___\___/|_| \_/_/ \_\_____|
To contact us follow the instructions:
1) Install and run “Tor Browser” from https://www.torproject.org/download/
2) Go to https://hunters33mmcwww7ek7q5ndahul6nmzmrsumfs6aenicbqon6mxfiqyd.onion/
3) Log in using the credentials: [snip]
---
Don't waste time. Inform your CEO about the incident ASAP. Show Data Leak Site:
https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (308)
Search, filter and paginate the victim timeline for Hunters. Showing 1–100 of 308.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Corantioquia id20274 View details | Colombia | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Wrap & Send Services id20273 View details | United States | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Eight8Ate Holdings, Inc id20272 View details | Philippines | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | GPF Lewis id19744 View details | United Kingdom | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Sioux Chief id19743 View details | United States | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Telco Intercontinental id19645 View details | United States | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Digestive Specialists id19644 View details | United States | Other | pending | ||
|
Exfiltraded data : no - Encrypted data : yes |
||||||
| Ransomware | FCC id19643 View details | Spain | Other | pending | ||
|
Exfiltraded data : no - Encrypted data : yes |
||||||
| Ransomware | Minnesota Lawyers Mutual Insurance id19595 View details | United States | Finance / Legal / Insurance | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Kenworth Del Sur id19350 View details | Mexico | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Kasb Bank - K-Trade id19347 View details | Pakistan | Finance / Legal / Insurance | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Mafi id19307 View details | Austria | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Pharma Force id19273 View details | Belgium | Healthcare / Pharma | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | HOPI id19230 View details | Czechia | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Groupe Delcourt id18998 View details | France | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Hofmann Fördertechnik GmbH id18997 View details | Germany | IT | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | IDS Infotech id18996 View details | India | IT | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Nexia Poyiadjis IT id18972 View details | Cyprus | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | TEDOM id18971 View details | Czechia | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Blackmon Mooring id18970 View details | United States | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Sansone Group id18954 View details | United States | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | National Sign corp id18951 View details | United States | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Cargills Bank id18537 View details | Sri Lanka | Finance / Legal / Insurance | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Megacentro id18535 View details | Chile | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | CableVision id18467 View details | Canada | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Courageous Home Care id18437 View details | United States | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Edesur Dominicana id18323 View details | Dominican Republic | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Tata Technologies id18160 View details | India | IT | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Kendall Auto Group id17826 View details | United States | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Omni United id17821 View details | Singapore | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Vermeer Mexico id17799 View details | Mexico | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Nichino Ryokka Co Ltd id17770 View details | Japan | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | SPEED Co id17709 View details | Egypt | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | CCOO Servicios id17708 View details | Spain | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Swissmem id17578 View details | Switzerland | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Rogers id17427 View details | Canada | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | SAKAI SOUKEN Co. id17273 View details | Japan | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Robertshaw id17248 View details | United States | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | PetroVietnam Exploration Production Corporation id16729 View details | Viet Nam | Manufacturing / Engineering | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | T. Hasegawa USA id16597 View details | United States | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Barber Specialties id16596 View details | United States | Hospitality / Food & Beverage / Tourism | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Costex id16595 View details | United States | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Patriarche Office of Architecture id16594 View details | France | Construction / Real Estate | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | COROB id16593 View details | Italy | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | RocSearch id16592 View details | United Kingdom | Other | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Unisource Information Services id16591 View details | United States | Services | pending | ||
|
Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Nikki-Universal Co Ltd id16480 View details | Japan | Services | pending | ||
|
Country : Japan - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Family Help & Wellness id16410 View details | United States | Public Sector | leaked | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | SeaLandAire Technologies id16381 View details | United States | IT | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | SmartLynx Airlines SIA id16289 View details | Latvia | Transportation / Travel / Logistics | pending | ||
|
Country : Latvia - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Astaphans id16193 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Microvision id16192 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Trev Deeley Motorcycles id16191 View details | Canada | Other | pending | ||
|
Country : Canada - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Development Bank of Jamaica id16190 View details | Jamaica | Finance / Legal / Insurance | pending | ||
|
Country : Jamaica - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Archetype Group id16189 View details | Viet Nam | Services | pending | ||
|
Country : Viet Nam - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Ecritel id16128 View details | France | Other | pending | ||
|
Country : France - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Wintergreen Learning Materials id16008 View details | Canada | Education | pending | ||
|
Country : Canada - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | AFD id16007 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Southern Acids id16004 View details | Malaysia | Other | pending | ||
|
Country : Malaysia - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Telecom Namibia id15955 View details | Namibia | Telecommunications | pending | ||
|
Country : Namibia - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | InterCon Construction id15812 View details | United States | Construction / Real Estate | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Conteg id15811 View details | Czechia | Other | pending | ||
|
Country : Czechia - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Horsa id15763 View details | Italy | Other | pending | ||
|
Country : Italy - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | IAС id15712 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | R Pac Central America S.A. de C.V. id15685 View details | El Salvador | Other | pending | ||
|
Country : N/A - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | JN attorney id15621 View details | United States | Finance / Legal / Insurance | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Orshan, Spann & Fernandez-Mesa id15620 View details | United States | Finance / Legal / Insurance | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Ace Laboratories Limited id15606 View details | United Kingdom | Other | pending | ||
|
Country : United Kingdom - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Jones & Mayer id15584 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Aeris Energy id15583 View details | Brazil | Energy | pending | ||
|
Country : Brazil - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | CK Power Public Manufacturing id15529 View details | Thailand | Energy | pending | ||
|
Country : Thailand - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Performance Health & Fitness id15483 View details | United States | Healthcare / Pharma | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Dorner Law & Title Services id15396 View details | United States | Finance / Legal / Insurance | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Mantinga id15386 View details | Lithuania | Other | pending | ||
|
Country : Lithuania - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | A&O IT Group id15350 View details | United Kingdom | Services | pending | ||
|
Country : United Kingdom - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Kumla Kommun id15302 View details | Sweden | Other | pending | ||
|
Country : Sweden - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Schmack id15288 View details | Germany | Energy | pending | ||
|
Country : Germany - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Sercomm id15287 View details | Taiwan, Province of China | Other | pending | ||
|
Country : Taiwan - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Amourgis & Associates id15253 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Dietzgen Corporation id15252 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Banco Sucredito Regional S.A.U. id15248 View details | Argentina | Finance / Legal / Insurance | pending | ||
|
Country : Argentina - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | New Law id15200 View details | United States | Finance / Legal / Insurance | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | European External Action Service (EEAS) id15140 View details | France | Other | pending | ||
|
Country : France - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Air Specialists Heating & Air Conditioning id15137 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Hemubo id15132 View details | Netherlands | Other | pending | ||
|
Country : Netherlands - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Cerp Bretagne Nord id15105 View details | France | Other | pending | ||
|
Country : France - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Ambica Steels id14975 View details | India | Manufacturing / Engineering | pending | ||
|
Country : India - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Niko Resources Ltd. id14974 View details | Canada | Services | pending | ||
|
Country : Canada - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | IdeaLab id14901 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Mercury Theatre id14861 View details | United Kingdom | Other | pending | ||
|
Country : United Kingdom - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Atende Software's id14851 View details | Poland | IT | pending | ||
|
Country : Poland - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | KMC Controls id14841 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Michael J Gurfinkel id14840 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Parnell Defense id14767 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Aaren Scientific id14766 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Protective Industrial Products id14734 View details | United States | Communication / Marketing | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||
| Ransomware | Therabel Lucien Pharma SAS id14733 View details | France | Healthcare / Pharma | pending | ||
|
Country : France - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Rumpke Consolidated Companies id14732 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Elmore Goldsmith id14727 View details | United States | Public Sector | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : no |
||||||
| Ransomware | Structural and Steel Products id14718 View details | United States | Manufacturing / Engineering | pending | ||
|
Country : United States of America - Exfiltraded data : yes - Encrypted data : yes |
||||||