Ransomware Group intelligence
Skira
InactiveTrack Skira with 16 published victims and 2 known leak locations in a single intelligence view.
Overview
Skira is tracked by Breach House as a ransomware group with 16 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | mtgc3qvyedjnfu7cen2zsupdppi5ys5g2hm6xwujvoepw25p4dy6huid.onion |
| Leak location 2 | Onion service | Unknown | mtgc3qvyedjnfu7cen2zsupdppi5ys5g2hm6xwujvoepw25p4dy6huid.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (16)
Search, filter and paginate the victim timeline for Skira. Showing 1–16 of 16.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | INNOVEX HOLDINGS CO., LTD id23965 View details | Japan | Services | ||
|
[AI generated] N/A |
|||||
| Ransomware | Dedicated Web Consultants, Inc (USA) - dwcusa.com id19678 View details | United States | Services | ||
|
dwcusa.com is associated with DWC USA, a United States-based services company that presents itself as an IT provider. Its site says it offers customized technology solutions, including network security, infrastructure, software, and app development services. The company markets support for organizations seeking to manage and modernize their information systems. It was listed as a ransomware victim associated with skira. |
|||||
| Ransomware | Dedicated Web Consultants, Inc id23964 View details | United States | Services | ||
|
[AI generated] N/A |
|||||
| Ransomware | April, 18, 2025: Independent Title Agency, LLC ("ITA") (USA hacked. 932.4 GiB is now leake... id19671 View details | United States | Communication / Marketing | ||
|
Independent Title Agency, LLC (ITA) is a full-service abstract and title company based in Syracuse, New York, and it serves clients across New York State. The company provides title-related services that support real-estate transactions, including search and closing coordination, and operates in the broader communication and marketing context of property-service delivery. Independent Title Agency was established in 1986 and presents itself as an independent title agency focused on settlement support and related documentation. It was listed as a ransomware victim associated with skira. |
|||||
| Ransomware | April, 18, 2025: Independent Title Agency, LLC ("ITA") (USA hacked. 932.4 GiB is for selli... id19254 View details | United States | Communication / Marketing | ||
|
Independent Title Agency, LLC (ITA) is a full-service abstract and title company based in Syracuse, New York, serving all of New York State. The company provides title and settlement support for real estate transactions and coordinates search and related services for buyers, sellers, lenders, and other parties in the property closing process. It operates in the communication and marketing sector as provided in the listing context, but its public-facing business is title and abstract services. The record was listed as a ransomware victim associated with skira. |
|||||
| Ransomware | Independent Title Agency, LLC ("ITA") (USA) id19677 View details | United States | Communication / Marketing | ||
|
Independent Title Agency, LLC (ITA) is a full-service abstract and title company based in Syracuse, New York, serving clients across New York State. Founded in 1986, it provides title-related services and can coordinate search and closing support through its branch network. The company operates in the communication and marketing context of property and title services, with offices in Syracuse, Rochester, Albion, and Utica. It was listed as a ransomware victim associated with skira. |
|||||
| Ransomware | Independent Title Agency, LLC id23963 View details | United States | Communication / Marketing | ||
|
[AI generated] ITA (Independent Title Agency, LLC) is a US-based company specialized in providing comprehensive title insurance services. They ensure a property title is legitimate, protecting potential homebuyers and mortgage lenders from financial loss due to title defects such as fraud or errors. The agency may also facilitate closing of real estate transactions. |
|||||
| Ransomware | March, 6, 2025: City government office in Van (Turkey) van.bel.tr hacked. 7.4 TiB is for s... id18458 View details | Türkiye | Public Sector | ||
|
van.bel.tr is the official website of Van Büyükşehir Belediyesi, the metropolitan municipality serving Van in eastern Turkey. As a public-sector authority, it provides municipal services and information for the city and its residents, including institutional pages, contact details, and service access. The municipality operates from Van and represents the local government for the metropolitan area. It was listed as a ransomware victim associated with skira. |
|||||
| Ransomware | City government office in Van (Turkey) - van.bel.tr id19676 View details | Türkiye | Public Sector | ||
|
van.bel.tr is the official website of T.C. Van Büyükşehir Belediyesi, the metropolitan municipality serving Van in eastern Turkey. As a public-sector entity, it provides municipal services, local government information, and public announcements for the city and surrounding area. The site also serves as the municipality’s online presence for residents seeking official updates and service details. In threat-intelligence records, van.bel.tr was listed as a ransomware victim associated with skira. |
|||||
| Ransomware | City government office in Van id23962 View details | Türkiye | Public Sector | ||
|
[AI generated] City Government Office in Van, Turkey, also known as van.bel.tr, is an administrative body responsible for local governance in the city of Van. It is involved in a range of municipal tasks such as urban planning, delivering local services, maintaining public facilities, and more. The office is a crucial component of the city’s infrastructure, supporting the growth, sustainability, and daily operations of Van. |
|||||
| Ransomware | Law Diary (USA) id19675 View details | United States | Finance / Legal / Insurance | ||
|
awdiary.com is a United States-based company operating within the Finance, Legal, and Insurance sectors, offering services related to commercial legal assets and liability management. The firm provides specialized financial solutions, including non-recourse funding agreements for litigation claims and portfolio management for plaintiffs and law firms. Its offerings support clients by financing out-of-pocket legal expenses and working capital associated with meritorious commercial claims. awdiary.com was listed as a ransomware victim associated with the threat actor skira. |
|||||
| Ransomware | Law Diary id23961 View details | United States | Finance / Legal / Insurance | ||
|
[AI generated] Law Diary (USA) is a legal support services provider primarily focused on the US market. It offers an array of services such as legal research, court searches, and case tracking to law firms, corporate legal departments, and governmental agencies. The company is committed to assisting legal professionals manage their workflow efficiently through systematic legal procedures and up-to-date technology. |
|||||
| Ransomware | Carruth Compliance Consulting id19674 View details | United States | Services | ||
|
[AI generated] Carruth Compliance Consulting is a company dedicated to consulting on compliance challenges related to Tax-Advantaged Benefit Program administration. It specializes in the administration of 403(b) and 457(b) retirement plans. The company helps employers and financial institutions navigate complex tax laws and compliance regulations relating to benefit plans, providing compliance consulting, plan administration, and ongoing compliance support. |
|||||
| Ransomware | CCL Products India id19673 View details | India | Communication / Marketing | ||
|
[AI generated] CCL Products India is a leading manufacturer and exporter of instant coffee. It was established in 1994 and is headquartered in Hyderabad, India. The company has coffee processing units in multiple regions offering a wide range of coffee products including freeze-dried, spray-dried, and agglomerated coffees. CCL distributes its products globally in bulk packaging, as well as private labeled direct consumer packaging. They are widely respected for their sustainable and socially responsible business practices. |
|||||
| Ransomware | Krisala Developer (India) id19672 View details | India | Communication / Marketing | ||
|
Krisala Developers is a prominent real estate company headquartered in Pimpri-Chinchwad, Maharashtra, India, with over 21 years of experience in delivering superior quality homes and innovative construction solutions. The firm specializes in residential and commercial projects across Pune and PCMC, having created a reputation for pioneering ideas like the +0.25 BHK and thoughtfully designed Japanese-themed spaces. Rooted in Pune and expanding across India, Krisala Developers is recognized as one of the leading and most admired real estate developers in the sector. The company was neutrally listed as a ransomware victim associated with the threat actor skira. |
|||||
| Ransomware | Krisala Developer id23960 View details | India | Communication / Marketing | ||
|
[AI generated] Krisala Developers is a renowned and well-established real estate company based in India. The company is known for its high-quality residential as well as commercial projects. They follow strategic business practices that aim at customer satisfaction, offer innovative projects, world-class facilities, and modern day amenities. Successful projects from Krisala include Magia Avenue, 41 Trees and 52 Patil. |
|||||