Ransomware Group intelligence
M3rx
ActiveTrack M3rx with 20 published victims and 2 known leak locations in a single intelligence view.
Overview
M3rx is tracked by Breach House as a ransomware group with 20 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | 4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion |
| Leak location 2 | Onion service | Unknown | pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (20)
Search, filter and paginate the victim timeline for M3rx.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | jichasa.com id29472 View details | Mexico | Finance / Legal / Insurance | ||
|
+1 (915) 881-8883. Jichasa Smart Logistics specializes in providing comprehensive solutions in foreign trade and logistics, with a focus on door-to-door services. Established in 1980, the company boasts over 30 years of experience and offers a wide range of services including customs consulting, inventory management, and supply chain management. Their intended clients span various industries such as automotive, aerospace, electronics, and agriculture, ensuring personalized attention through dedicated account executives. With a strong presence across Mexico and advanced technology for real-time operations, Jichasa aims to exceed client expectations in logistics and legal consulting. Stolen: 116gb 98k files |
|||||
| Ransomware | dosocho.es id29200 View details | Spain | Manufacturing / Engineering | ||
|
+34 918 264 028. Recambios Generales del Automóvil Dosocho S.L. is a Madrid-based Spanish company specializing in the retail and e-commerce distribution of brand-new automotive spare parts and accessories. Operating through its dedicated platforms like dosochoauto.es, the company provides a comprehensive catalog of high-quality components tailored for various vehicle repairs and maintenance Stolen: 50gb 28k files |
|||||
| Ransomware | soft-inc.com id29201 View details | Japan | IT | ||
|
+1 212-633-1515. SOFT Inc. is an established American technology consulting and professional staffing firm founded in 1981 and headquartered in New York City. The company specializes in building critical technology solutions, IT services, and supplying top-tier engineering and technical talent for Fortune 500 companies across the United States Stolen: 49.8gb 9289 files |
|||||
| Ransomware | psbsementi.it id29203 View details | Italy | Agriculture / Food | ||
|
+39 051 890 421. Società Produttori Sementi S.p.A. (PSB) is one of Italy’s oldest and most prestigious agricultural enterprises, specializing in the research, genetic improvement, multiplication, and distribution of certified seeds. For over a century, PSB has been a cornerstone of the Mediterranean agricultural supply chain, bridging the gap between scientific field research and the industrial food sector. Stolen: 364gb 280k files |
|||||
| Ransomware | grupo55.com id29204 View details | Spain | Finance / Legal / Insurance | ||
|
+34 918 892 727. Founded in 1996, Grupo 55 Correduría de Seguros leverages decades of professional expertise and a highly qualified team to deliver personalized, top-tier insurance solutions. Collaborating closely with a strong network of partners, the company continuously enhances its service quality to outperform competitors and ensure maximum solvency for its clients. Stolen: 178gb 166k files |
|||||
| Ransomware | pvdd.ca id28914 View details | Canada | Construction / Real Estate | ||
|
+1 (604) 894-6632. Pemberton Valley Dyking District is an autonomous local government body dedicated to maintaining, adapting, and upgrading flood protection systems for the Pemberton Valley community. The organization provides essential services aimed at safeguarding residents from flood risks. It operates through a Board of Trustees and engages with the public during monthly meetings. The district also offers resources and real-time information during high water events to ensure community safety. Stolen: 148gb 50080 files |
|||||
| Ransomware | datasavior.com id28915 View details | United States | IT | ||
|
+1 (512) 707-0026. Datasavior is a full-service systems integration company based in Austin, Texas, specializing in IT support and fiber cable installations. They offer comprehensive solutions for medical and dental office IT, including practice management, data backup services, and advanced antivirus software. Their target clients include businesses in need of reliable technology solutions and support, particularly in the healthcare sector. With a team of skilled technicians, Datasavior aims to help clients optimize their technology for current and future needs. Stolen: 540mb 1,410 Files |
|||||
| Ransomware | kbtoys.com.au id28916 View details | Australia | Retail / E-commerce | ||
|
+61 295250878. We offer a wide selection of toys and giftware that would be suitable for birthdays, Christmas and celebrations of all sorts. We also accommodate shopping tours by appointment. If you're looking for toys for a social club or special function, please feel encouraged to give us a call or use the contact form on the right. Come in and visit our factory outlet located at: Unit 4, 60 Box Rd, Taren Point NSW Stolen: 140gb 36840 files |
|||||
| Ransomware | alge-stop.dk id28917 View details | Denmark | Services | ||
|
+45 22100211 . Alge-Stop helps homeowners and businesses keep their outdoor surfaces clean and protected. They remove algae and moss from roofs, walls, tiles, and paving stones, making surfaces look fresh and new. With their special treatment and cleaning process, Alge-Stop offers up to 20 years of protection, helping customers maintain the beauty and integrity of their property Stolen: 73gb 7100 files |
|||||
| Ransomware | emtco.com id28793 View details | United States | Energy | ||
|
+1 3169426147 . Engineered Machine Tool, Inc., based in Wichita, Kansas, specializes in providing manufacturing firms with custom machinery and tooling designed to enhance production efficiency. Since 1987, the company has developed a range of automated machines and equipment, including Automatic Storage and Retrieval Systems and Large Tool Palletizing Systems. EMT offers comprehensive services from initial concept through to complete installation, ensuring tailored solutions for their clients' specific needs. Their focus is on delivering high-performance automation tools for various industrial applications Stolen: 180gb 698k files |
|||||
| Ransomware | it-freitag.de id28794 View details | Germany | IT | ||
|
+49 493526000000 . Freitag IT GmbH specializes in providing scalable and reliable IT solutions, including cloud computing, virtualization, and managed services. Their offerings cater to agile businesses, focusing on modern technologies such as hybrid multi-cloud architectures and machine learning. The company aims to enhance productivity and efficiency through tailored IT services, including remote management, security solutions, and unified communication systems. Their target clients include organizations seeking comprehensive IT support and innovative digital transformation solutions. Stolen: -- |
|||||
| Ransomware | manateeair.com id28795 View details | United States | Services | ||
|
+1 9417582323 . Manatee Air Heating & Cooling Inc has been providing expert HVAC services in Manatee and Sarasota counties since 1988, specializing in heating and air conditioning installation, repair, and maintenance. The company prides itself on its commitment to quality work, customer satisfaction, and competitive pricing, offering financing options and a 1-year labor warranty. With a team of certified, licensed, and insured technicians, they ensure fast turnaround times and emergency services to keep homes and businesses comfortable year-round. Manatee Air Heating & Cooling is recognized for its reliability and community-focused approach, making it a trusted choice for HVAC solutions. Stolen: -- |
|||||
| Ransomware | dmschweiz.ch id28486 View details | Switzerland | IT | ||
|
Sie haben im Katalog unsere Angebote von installierten und betriebsbereiten Gerten. Die Installationen können nach Ihren Wünschen angepasst werden. DM Standard-Installation ist optimiert und ohne Herstellerwerbung. Stolen: 120gb 100k files |
|||||
| Ransomware | anvilarts.org.uk id28487 View details | United Kingdom | Other | ||
|
Anvil Arts is the largest performing arts organization in Hampshire, operating as an independent charitable trust. It manages three venues in Basingstoke, including The Anvil and The Haymarket, providing a diverse range of performances and cultural events. Stolen: 480gb 299k files |
|||||
| Ransomware | primeproperties.com.au id28488 View details | Australia | Construction / Real Estate | ||
|
Prime Properties (NSW) P/L is a privately owned company based in Sydney, Australia, established in 1982, specializing in property investment, building management, and management consultancy services Stolen: 100gb 81k files |
|||||
| Ransomware | airdriephysio.com id28489 View details | United Kingdom | Healthcare / Medicine | ||
|
Airdrie Physiotherapy & Massage is a multi-disciplinary clinic located in Airdrie, Alberta, offering a range of services including physiotherapy, massage therapy, acupuncture, and laser therapy Stolen: 54gb 116k files |
|||||
| Ransomware | rainforestclean.com id28490 View details | United States | Services | ||
|
Rainforest Carwash and Oil Change, along with it’s owner, enjoys giving back to our local community. Hopefully you are inspired to help after seeing the ways in which we try to help others. Stolen: 259gb 77k files |
|||||
| Ransomware | rotak.it id28491 View details | Italy | IT | ||
|
Rotak (specifically in the context of Rotak Instruments) focuses on the distribution of specialized medical and analytical instrumentation, with related entities in industrial engineering and automation Stolen: 22.5gb 20k files |
|||||
| Ransomware | osoftec.com id28492 View details | Germany | IT | ||
|
+91 9717385459 . Optimization Software Technologies, LLP. is an advanced technology solutions development company that focuses on improving operational efficiency and profitability for its clients Stolen: 222gb 113k files |
|||||
| Ransomware | boxtopia.co.uk id28493 View details | United Kingdom | Manufacturing / Engineering | ||
|
+44 1476576090 . Boxtopia is the UK's leading supplier of custom cardboard boxes and printed boxes, specializing in short runs for small businesses with no minimum order. Stolen: 166gb 280k files |
|||||