Ransomware Group intelligence
Ragnarlocker
InactiveTrack Ragnarlocker with 128 published victims and 4 known leak locations in a single intelligence view.
Overview
Ragnarlocker is tracked by Breach House as a ransomware group with 128 published victims.
France is currently the most targeted country in this dataset.
4 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (4)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | rgleak7op734elep.onion |
| Leak location 2 | Onion service | Unknown | rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion |
| Leak location 3 | Onion service | Unknown | p6o7m73ujalhgkiv.onion |
| Leak location 4 | Onion service | Unknown | ragnarnwvli32xnmwudsvhbl7klzmofxeylyhcqfc5ifx5mbybq3ekqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (128)
Search, filter and paginate the victim timeline for Ragnarlocker. Showing 101–128 of 128.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | LEAK Post Campari Group id541 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Updates with files in EastCoastSeafood Inc. id542 View details | Agriculture / Food | — | ||
|
No additional victim description available. |
|||||
| Ransomware | New "WallofShamer" - East Coast Seafood Inc. id543 View details | Agriculture / Food | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Shasun Chemicals & Drugs Ltd. LEAK id539 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | JMA Energy LEAK id538 View details | Energy | — | ||
|
No additional victim description available. |
|||||
| Ransomware | New Files For Leak Campari Post id532 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Ragnar_Team Announce of Potential "WallofShamer" id522 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | LEAK Post CAPCOM id520 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | LEAK post FINSA id521 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Campari Group id514 View details | Italy | Services | — | |
|
No additional victim description available. |
|||||
| Ransomware | Official appeal to DASSAULT FALCON JET id517 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | DASSAULT FALCON JET id513 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Security breach of CAPCOM network id504 View details | Telecommunications | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Security breach of Campari Group network id494 View details | Telecommunications | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CMA CGM (french carrier, container line) id485 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | BIOLOGICAL E. Ltd. (BE) LEAK POST id484 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Insignia Environmental company. id442 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Astro Industries, Inc. id423 View details | United States | Services | — | |
|
No additional victim description available. |
|||||
| Ransomware | Bailey&Galyen Attorney at Law id424 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | New leaks from SOLTEK PACIFIC id425 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | GST Autoleather Company ! id426 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ST Engineering id427 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Leaks from company EDP Group id420 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Leaks from company Omniga GmbH & Co. id421 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Leakage from company Catania, Mahon & Rider, PLLC id418 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Brunner Announce – Hello World ! id419 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | Leaks Company Birch Communications inc. id416 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Energias de Portugal (EDP) id349 View details | Portugal | Other | — | |
|
No additional victim description available. |
|||||