Ransomware Group intelligence
Killsec
ActiveTrack Killsec with 293 published victims and 3 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Killsec is tracked by Breach House as a ransomware group with 293 published victims.
United States is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 2 | Onion service | Up checked 1h ago | ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion |
| Leak location 3 | Onion service | Up checked 1h ago | ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion |
| Leak location 1 | Onion service | Down checked 1h ago | kill432ltnkqvaqntbalnsgojqqs2wz4lhnamrqjg66tq6fuvcztilyd.onion |
Top Activity Sectors (16)
- Not identified 106
- Communication / Marketing 39
- Services 30
- Healthcare / Pharma 27
- Finance / Legal / Insurance 24
- Retail / E-commerce 11
- Education 10
- IT 9
- Public Sector 6
- Hospitality / Food & Beverage / Tourism 6
- Transportation / Travel / Logistics 6
- Construction / Real Estate 3
- Energy 3
- Telecommunications 2
- Manufacturing / Engineering 2
- Agriculture / Food 1
Typical Attacks (12)
▼MITRE ATT&CK does not currently catalogue Killsec, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: killsec executes PowerShell scripts to stage payloads and manipulate system processes during initial compromise.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: killsec modifies Windows Registry Run Keys to ensure malware execution upon system reboot for persistence.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: killsec disables security tools like EDR agents and antivirus software to prevent detection and response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.002 Software Packing Stealth
What they do: killsec packs its malware binaries to evade signature-based detection by security vendors.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1070.004 File Deletion Stealth
What they do: killsec deletes Volume Shadow Copies and backup directories via vssadmin and command-line tools to eliminate recovery options.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1003.001 LSASS Memory Credential Access
What they do: killsec accesses and dumps LSASS memory using credential-extraction tools to harvest user credentials.
What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
-
T1018 Remote System Discovery Discovery
What they do: killsec performs remote system discovery via Nmap scans to map internal networks and identify high-value targets.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1135 Network Share Discovery Discovery
What they do: killsec scans network shares using SMB tools to identify victim hosts and data repositories for targeting.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: killsec leverages SMB/Windows Admin Shares for lateral movement across networked machines within victim environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1567.002 Exfiltration to Cloud Storage Exfiltration
What they do: killsec exfiltrates stolen data via encrypted C2 channels before deploying ransomware to maximize extortion leverage.
What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: killsec encrypts victim files using custom symmetric encryption routines targeting documents, images, and databases.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: killsec invokes system shutdown commands and service termination scripts to disrupt operational continuity.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Victims (293)
Search, filter and paginate the victim timeline for Killsec. Showing 201–293 of 293.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | RiverRestHome id15608 View details | United States | Services | ||
|
River Valley Rest Home is a Level IV Rest Home licensed for 25 beds with CSF (Community Support Facility) designation. |
|||||
| Ransomware | Nationwide Legal id15598 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Eassy Life id15597 View details | India | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Efi Sales id15596 View details | Kenya | Retail / E-commerce | ||
|
No additional victim description available. |
|||||
| Ransomware | Vogue Homes id15595 View details | Australia | Other | ||
|
Vogue Homes is the leading home builders in Sydney, with award winning designs, house plans and land packages, with luxurious designer home. |
|||||
| Ransomware | ABC Group id15573 View details | Switzerland | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | ViralPitch id15563 View details | Colombia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Camim id15523 View details | Brazil | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | LiquiTech id15522 View details | Colombia | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Equentis Wealth id15454 View details | India | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Terra Energy id15453 View details | United States | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | Followup CRM id15387 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Buddy Loan id15371 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Dragon Capital id15362 View details | Viet Nam | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | BluMed Health id15342 View details | Israel | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Axpr Valve Science id15275 View details | Brazil | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Giggle Finance id15273 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | National Institute of Administration id15262 View details | Romania | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | OxyHealth id15247 View details | Saudi Arabia | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Doctor 24x7 id15133 View details | India | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Sumitomo id15123 View details | South Africa | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Fortis id15027 View details | India | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | ConCash id15015 View details | Brazil | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Mixfame id15009 View details | United Arab Emirates | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Edmov id15004 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Bliss Worldwide id14996 View details | India | Other | ||
|
$10000 |
|||||
| Ransomware | Doctor24x7 id14990 View details | India | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Delcaper id14989 View details | Singapore | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Government of Brazil id14988 View details | Brazil | Public Sector | ||
|
$25000 |
|||||
| Ransomware | NoBroker id14987 View details | India | Other | ||
|
$50000 |
|||||
| Ransomware | SW Reclaim id14986 View details | United Kingdom | Other | ||
|
$20000 |
|||||
| Ransomware | Wilson Tarquin id14985 View details | United Kingdom | Other | ||
|
$20000 |
|||||
| Ransomware | shipkar.co.in id14902 View details | India | Communication / Marketing | ||
|
Welcome to Shipkar Express! At Shipkar Express, we are passionate about delivering excellence in courier services |
|||||
| Ransomware | boloforms.com id14881 View details | India | Other | ||
|
We allow you to efficiently manage document workflows, send multi-recipient signatures, and receive real-time updates, significantly streamlining your operations. |
|||||
| Ransomware | onedayevent.com id14880 View details | United States | Finance / Legal / Insurance | ||
|
One Day Event Insurance is a special event insurance company that sells event liability insurance for all types of events such as weddings, birthdays, vendors, concerts, barmitzvahs, and festivals. |
|||||
| Ransomware | autodukan.com id14879 View details | India | Manufacturing / Engineering | ||
|
AutoDukan offers a wide range of car spare parts and accessories online in India. Shop now for low prices, all car makes & models, and fast shipping across India. |
|||||
| Ransomware | apollohospitals.com id14847 View details | India | Healthcare / Pharma | ||
|
Apollo Hospitals is one of India's leading healthcare institutions, offering world-class medical services across multiple specialties. |
|||||
| Ransomware | ask.vet id14831 View details | United States | Services | ||
|
AskVet provides virtual pet care services, offering 24/7 consultations through an AI-powered platform for pet owners. They are focused on delivering real-time support for pet health management. |
|||||
| Ransomware | tripxoxo.com id14811 View details | India | Transportation / Travel / Logistics | ||
|
Tripxoxo is a digital platform for travelers to book their activities, experiences, tickets, sightseeing tours, and everything that they would need once they reach the destination. |
|||||
| Ransomware | volohealth.in id14801 View details | India | Healthcare / Pharma | ||
|
India's first fully cashless OPD solution which offers operational efficiency, mitigate frauds & misuse, healthcare insights and cost savings. Payvider offers comprehensive patient support services for specified treatment such as Cancer. |
|||||
| Ransomware | moi.gov.ly id14782 View details | Libya | Public Sector | ||
|
The Ministry of Internal Affairs of Libya (وزارة الداخلية الليبية) is the interior ministry of Libya. The Ministry is headquartered in Tripoli. |
|||||
| Ransomware | rudrakshahospitals.com id14759 View details | India | Healthcare / Pharma | ||
|
Welcome to Rudraksha Multispeciality Hospitals, the best hospital in Bhopal for its affordability, facilities, and services. We offer comprehensive healthcare services, blending advanced medical expertise with compassionate care. |
|||||
| Ransomware | extramarks.com id14723 View details | India | Education | ||
|
Discover a new era of education with Extramarks. Our innovative digital solutions empower schools, teachers, students, and parents to revolutionize the way they teach and learn. |
|||||
| Ransomware | argofinance.org id14706 View details | United States | Finance / Legal / Insurance | ||
|
We are an investment company, using blockchain technology to drive secure and profitable investments and manage portfolios for our clients. |
|||||
| Ransomware | transfoodbeverage.com id14705 View details | Thailand | Hospitality / Food & Beverage / Tourism | ||
|
Trans F&B is a subsidiary of Trans Corp which is engaged in Food & Beverages (Food & Beverage) Our company brand Baskin Robbins, Coffee Bean, Wendy's, Tasty, Gyukatsu, Wardani, Meatballs Duren Three |
|||||
| Ransomware | avans.com id14665 View details | Mexico | Transportation / Travel / Logistics | ||
|
Ofrecemos soluciones de acceso, control de flujo peatonal y transportación vertical para todo tipo de edificios. |
|||||
| Ransomware | pingan.com id14659 View details | China | Services | ||
|
Ping An is a China-based conglomerate that owns and operates businesses in fields such as banking, insurance, asset management and healthcare services. |
|||||
| Ransomware | healthyuturn.in id14639 View details | India | Healthcare / Pharma | ||
|
At Healthy U turn, we specialize in providing tailored dietary plans and expert guidance to help you navigate diabetes with confidence. |
|||||
| Ransomware | yassir.com id14622 View details | Algeria | Retail / E-commerce | ||
|
Yassir is a super app for ride-hailing, food delivery, and grocery shopping, offering convenience and safety with transparent pricing. Trusted by over 5 million users, it simplifies your daily life. |
|||||
| Ransomware | seoulpi.io id14614 View details | Korea, Republic of | Construction / Real Estate | ||
|
Seoul Property Insight (SPI) is a prominent player in the South Korean real estate sector, dedicated to providing comprehensive insights and analysis on commercial real estate investments. |
|||||
| Ransomware | betterhalf.ai id14610 View details | India | Communication / Marketing | ||
|
The Wedding Company is India's largest end-to-end wedding planning service provider. They offer comprehensive solutions for couples planning their nuptials. The Wedding Company leverages its industry expertise and extensive partner network to deliver stress-free, personalized wedding experiences. |
|||||
| Ransomware | bbgc.gov.bd id14580 View details | Bangladesh | Education | ||
|
The importance of education in building a prosperous nation is immense. Late Shamsul Haque MP established the school in 1973 with the aim of spreading the light of education. |
|||||
| Ransomware | telehealthcenter.in id14543 View details | India | Healthcare / Pharma | ||
|
Telehealth Center allows the doctors to serve the country by serving the patients who need immediate care. Doctors anywhere in India can join the Telehealth Center team and provide the consultation from anywhere and anytime using their mobile phone or tablet and help provide care to the most vulnerable population. |
|||||
| Ransomware | credihealth.com id14540 View details | India | Healthcare / Pharma | ||
|
Credihealth is a leading healthcare technology platform that provides patients with access to a wide range of medical services. The company focuses on facilitating connections between patients and healthcare providers, offering services such as online consultations, appointment scheduling, and access to medical information. Credihealth aims to enhance the healthcare experience by leveraging technology to streamline processes and improve patient outcomes. |
|||||
| Ransomware | itap.nacc.go.th id14522 View details | Thailand | Public Sector | ||
|
The Integrity and Transparency Assessment of Public Service (ITAP) is an initiative by the National Anti-Corruption Commission (NACC) aimed at evaluating the ethical standards and transparency of government agencies across Thailand. |
|||||
| Ransomware | porter.in id14511 View details | India | Transportation / Travel / Logistics | ||
|
Porter is a tech-enabled logistics company that provides a comprehensive range of delivery services, including intracity and intercity solutions. |
|||||
| Ransomware | poorvika.com id14509 View details | India | Retail / E-commerce | ||
|
Poorvika Mobiles Private Ltd is a company that operates in the Consumer Electronics & Computers Retail industry. |
|||||
| Ransomware | nfe.fazenda.gov.br id14489 View details | Brazil | Finance / Legal / Insurance | ||
|
The NF-e Portal aims to provide information about the Electronic Invoice (Nota Fiscal Eletr�nica), coordinated by ENCAT and developed in partnership with the Federal Revenue of Brazil. Its purpose is to transition from paper invoices to electronic invoices, which have legal validity for all purposes. |
|||||
| Ransomware | medicheck.io id14420 View details | Belgium | Healthcare / Pharma | ||
|
MediCheck is a pioneering service provider specializing in medical control and absenteeism management solutions in Belgium. With a focus on enhancing the experience for both employers and employees, MediCheck leverages advanced digital processes to streamline medical checks, making them less intrusive and more efficient. |
|||||
| Ransomware | miit.gov.cn id14320 View details | China | Public Sector | ||
|
The Ministry of Industry and Information Technology (MIIT) is the sixth-ranked executive department of the State Council of the People's Republic of China. |
|||||
| Ransomware | SuperCommerce.ai id14312 View details | United States | Retail / E-commerce | ||
|
Supercommerce.ai transforms commerce in the Middle East and Africa with digital solutions for B2C and B2B markets, offering services like autonomous commerce and backend support for tech teams. |
|||||
| Ransomware | rupicard.com id14239 View details | India | Finance / Legal / Insurance | ||
|
India�s #1 Fixed Deposit (FD) Credit Card is empowering millions of Indians to enhance their CIBIL score. |
|||||
| Ransomware | schynsassurances.be id14220 View details | Belgium | Communication / Marketing | ||
|
Schyns Assurances & Finances is a trusted ally in protecting your assets, wealth, and savings. With over 40 years of experience, we prioritize quality over quantity by providing tailored solutions for both individuals and professionals. Our small yet dedicated team is committed to ensuring that clients feel secure and can rely on our assistance whenever needed. |
|||||
| Ransomware | pv.be id14219 View details | Belgium | Communication / Marketing | ||
|
P&V is a Belgian cooperative insurance group based in Belgium. We have compromised a third-party provider and exfiltrated data related from SaaS enterprise clients. This company is implicated in the breach, and we will publish all relevant documents if a resolution is not reached. |
|||||
| Ransomware | cda.be id14195 View details | Belgium | Communication / Marketing | ||
|
CDA Assurances is a long-established insurance company based in Belgium, dedicated to providing personalized insurance solutions tailored to the unique needs of each client. With over a century of experience, CDA emphasizes a customer-centric approach, ensuring that clients receive comprehensive coverage and attentive service. |
|||||
| Ransomware | belfius.be id14194 View details | Belgium | Finance / Legal / Insurance | ||
|
Belfius Bank, founded in 1996 and headquartered in Brussels, Belgium, provides banking services. |
|||||
| Ransomware | dvv.be id14193 View details | Belgium | Communication / Marketing | ||
|
DVV Verzekeringen is a prominent insurance provider based in Belgium, specializing in a wide array of insurance and financial products tailored for individuals, self-employed professionals, and small to medium-sized enterprises (SMEs). With a commitment to delivering comprehensive coverage and exceptional customer service... |
|||||
| Ransomware | tjs.com id14044 View details | United States | Communication / Marketing | ||
|
ZeroShrink by TJS delivers an innovative and comprehensive RFID package combined with a robust cloud-based POS system tailored specifically for the diamond and jewelry industry. Our mission is to enhance your POS experience with a focus on security, ease of use, and customization. |
|||||
| Ransomware | medisetter.com id14041 View details | Viet Nam | Healthcare / Pharma | ||
|
Medisetter is Vietnam's largest multichannel digital network dedicated to healthcare practitioners (HCPs). The platform emphasizes the quality of its member base over quantity, ensuring that all members are verified healthcare practitioners or medical students. |
|||||
| Ransomware | agra-services.be id14040 View details | Belgium | Services | ||
|
Agra Services is a prominent insurance provider in Belgium, dedicated to offering comprehensive insurance solutions that cater to individuals and families at every stage of life. With a diverse portfolio of products, Agra Services emphasizes customer-centric services across various areas, including mobility, home, family protection, health, and savings. |
|||||
| Ransomware | mykukun.com id14032 View details | United States | Communication / Marketing | ||
|
Kukun helps homeowners buy better and renovate smarter. It offers a suite of data-driven home investment insight products tailored for homeowners, investors, realtors, and professionals |
|||||
| Ransomware | onedayonly.co.za id13988 View details | South Africa | Retail / E-commerce | ||
|
OneDayOnly is an online shopping platform offering a variety of deals on consumer products, including home and garden items, apparel, electronics, and more. The platform features limited-time promotions, clearance sales, and everyday essentials, appealing to a wide range of customers looking for discounts and unique products. |
|||||
| Ransomware | autonomous.ai id13982 View details | United States | Communication / Marketing | ||
|
Autonomous specializes in ergonomic office furniture and tools aimed at improving productivity and well-being. The company offers a range of products, including smart desks, ergonomic chairs, and accessories, designed for both individuals and organizations. |
|||||
| Ransomware | terralogs.com.br id13965 View details | Brazil | Services | ||
|
TerraLogs is a digital platform specializing in financing solutions for the agribusiness sector in Brazil. The company focuses on providing farmers and agribusinesses with tailored financial solutions, leveraging advanced algorithms to assess property values and potential credit. |
|||||
| Ransomware | schoolrush.com id13956 View details | United States | Education | ||
|
School Rush platform allows schools to publish personalized calendar of events to parents, send classroom pictures and activities to parents instantly, publish staff and student directories, and create notifications. |
|||||
| Ransomware | instadriver.co id13950 View details | Colombia | Other | ||
|
Instadriver is a dedicated platform to find and hire drivers. Employers rely on Instadriver to recruit drivers. |
|||||
| Ransomware | level.game id13944 View details | Russian Federation | Telecommunications | ||
|
Level SuperMind is a wellness technology company focused on improving mental clarity and well-being through its mobile app. The app helps users reduce stress, anxiety, and overthinking by offering guided meditations, breathwork, sleep tools, and journaling exercises. |
|||||
| Ransomware | jpoint.in id13908 View details | India | Communication / Marketing | ||
|
Nahar JPoint, an innovative digital project launched by JITO (Jain International Trade Organization)... |
|||||
| Ransomware | startaxi.com id13833 View details | Romania | Other | ||
|
Star Taxi was designed as a revolutionary solution for the Romanian taxi market. |
|||||
| Ransomware | icarasia.com id13743 View details | Thailand | Communication / Marketing | ||
|
iCarAsia is a leading digital automotive platform operating primarily in Southeast Asia, specifically in Malaysia, Indonesia, and Thailand. The platform provides a comprehensive network for buying, selling, and learning ... |
|||||
| Ransomware | bonatra.com id13719 View details | Healthcare / Pharma | |||
|
Bonatra is the leading Holistic Health Care Company offering natural therapies to promote health and well-being. |
|||||
| Ransomware | notariusze.waw.pl id13685 View details | Poland | Other | ||
|
We have breached notariusze.waw.pl. For us to wipe the databreach, we ask for a ransom of 10000 EUR. |
|||||
| Ransomware | fingersstore.com id13638 View details | India | Retail / E-commerce | ||
|
We have breached fingersstore.com. For us to wipe the databreach, we ask for a ransom of 2000 EUR. |
|||||
| Ransomware | stb.ro id13617 View details | Romania | Transportation / Travel / Logistics | ||
|
We have breached STB.ro (Romanian public transport). For us to wipe the databreach, we ask for a ransom of 5000 EUR. |
|||||
| Ransomware | maxcess-logistics.com id13215 View details | Tunisia | Transportation / Travel / Logistics | ||
|
Maxcess Logistics is a freight forwarding and logistics company based in Rades, Tunisia. They provide a variety of logistics solutions including airfreight, seafreight, and customs clearance. |
|||||
| Ransomware | agranibank.org id12588 View details | Bangladesh | Finance / Legal / Insurance | ||
|
Agrani Bank PLC is a state-owned commercial bank of Bangladesh established in 1972. Its headquarters is situated at Motijheel in Dhaka, the capital city of Bangladesh. |
|||||
| Ransomware | laxmicapital.com.np id12587 View details | Nepal | Finance / Legal / Insurance | ||
|
Laxmi Capital Market Limited, Finance, Banking, eBanking, Online Banking, Capital |
|||||
| Ransomware | delhipolice.gov.in id11484 View details | India | Retail / E-commerce | ||
|
We have got Delhi Police breached. We managed to export all the data except for the pictures which we exported only 4GB and the rest are stored on their shitty server... |
|||||
| Ransomware | politiaromana.ro id11334 View details | Romania | Other | ||
|
We managed to gain access to a server belonging to the Romanian police and discovered over 200,000 records. To completely delete this data, we ask for a ransom of 1500 EUR. |
|||||
| Ransomware | rabitbd.com id11333 View details | Bangladesh | Other | ||
|
We got the Bangladeshi payment system (aka Rabitbd) breached. For us to wipe the databreach, we ask for a ransom of 2k EUR (negotiable). |
|||||
| Ransomware | pbgbank.com id11332 View details | India | Finance / Legal / Insurance | ||
|
We have got PBGB (Paschim Banga Gramin Bank) breached.For us to wipe the databreach, we ask for a ransom of 10.000 EUR (negotiable). |
|||||
| Ransomware | excellifecoaching.com id11331 View details | United States | Retail / E-commerce | ||
|
We have extracted the whole database. WP plugins data, theme, WooCommerce data etc. We have also logged out administrators for security reason and changed password. |
|||||
| Ransomware | keralapolice.gov.in id11330 View details | India | Finance / Legal / Insurance | ||
|
The Kerala Police is the law enforcement agency for the Indian state of Kerala. We have got keralapolice.gov.in (Kerala police) breached. For us to wipe the databreach, we ask for a ransom of 2500 EUR (negotiable). |
|||||