Ransomware Group intelligence
Toufan
InactiveTrack Toufan with 117 published victims and 6 known leak locations in a single intelligence view.
Overview
Toufan is tracked by Breach House as a ransomware group with 117 published victims.
Israel is currently the most targeted country in this dataset.
6 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (6)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Web location | Unknown | t.me/s/CyberToufanBackup |
| Leak location 2 | Web location | Unknown | t.me/s/CyberToufan |
| Leak location 3 | Web location | Unknown | t.me/CyberToufan |
| Leak location 4 | Web location | Unknown | t.me/CyberToufan02 |
| Leak location 5 | Web location | Unknown | t.me/CyberToufanBackup |
| Leak location 6 | Web location | Unknown | toufanleaks.org |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (117)
Search, filter and paginate the victim timeline for Toufan. Showing 101–117 of 117.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | barindustrial.com id10096 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | badgermill.com id10095 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | atwoodindustries.com id10094 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | arieladar.com id10093 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | api.touch-ins.co.il id10092 View details | Israel | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | apisinc.com id10091 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | amtektool.com id10090 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | alleghenytool.net id10089 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | alcornindustrial.com id10088 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ustg.net id10087 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | naandanjain.com id10072 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Ta-Supply.com id10070 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | techno-rezef.com id10065 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | curver.com id10064 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dorot.com id10063 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | graf.co.il id10062 View details | Israel | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | brother.co.il id10061 View details | Israel | Other | — | |
|
No additional victim description available. |
|||||