🏹 Fog — Ransomware
Fog, which uses the .flocked extension for encrypted files, was first observed in May in campaigns by Storm-0844, a threat actor known for distributing Akira. By June, Storm-0844 was deploying Fog more than Akira.
Classification
Ransomware
Leak-site victims
189
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (189)
| Victim | Country | Published | Domain |
|---|---|---|---|
| Newtown Friends School (newtownfriends.org) | US | 2025-03-20T14:02:12.582949+00:00 | newtownfriends.org |
| RAE (Real Academia Española) (rae.es) | ES | 2025-03-17T14:54:26.150096+00:00 | rae.es |
| University Diagnostic Medical Imaging, PC (udmi.net) | US | 2025-03-13T05:28:24.204859+00:00 | udmi.net |
| El Camino Real Academy (elcaminorealacademy) | US | 2025-03-13T01:00:37.074020+00:00 | elcaminorealacademy.com |
| Wilkinson Rogers (wilkinsonrogers.com) | 2025-03-11T01:28:18.293864+00:00 | wilkinsonrogers.com | |
| Magnolia Manor (magnoliamanor.com) | US | 2025-03-10T23:55:50.920360+00:00 | magnoliamanor.com |
| Oberlin Cable Co-op (oberlin.net) | US | 2025-03-06T12:43:56.692075+00:00 | oberlin.net |
| 1X Internet | DE | 2025-03-06T02:10:41.540862+00:00 | 1xinternet.de/en |
| Bizcode | IT | 2025-03-06T02:09:11.112694+00:00 | bizcode.it |
| Manning Publications Co. | US | 2025-03-06T02:07:41.363035+00:00 | manning.com |
| Engikam | IT | 2025-03-06T02:06:10.842417+00:00 | engicam.com |
| FHNW | CH | 2025-03-06T02:04:34.844709+00:00 | fhnw.ch/en |
| Aeonsparx | MY | 2025-03-06T02:03:02.416175+00:00 | aeonsparx.com |
| Flightsim studio | 2025-03-06T01:59:55.195641+00:00 | flightsim-studio.com | |
| Neopoly | DE | 2025-03-06T01:58:23.835457+00:00 | neopoly.de |
| Kr3m | DE | 2025-03-06T01:56:54.293035+00:00 | kr3m.com |
| InfoReach | US | 2025-03-06T01:55:23.678159+00:00 | inforeachinc.com |
| Euranova | BE | 2025-03-06T01:53:49.556106+00:00 | euranova.eu |
| Inelmatic | ES | 2025-03-06T01:52:19.498395+00:00 | inelmatic.com |
| Kotliva | RU | 2025-03-06T01:50:48.533868+00:00 | koltiva.com |
| Blue Planet | 2025-03-06T01:47:47.374451+00:00 | blueplanet.com | |
| Eumetsat | DE | 2025-03-06T01:46:16.132041+00:00 | eumetsat.int |
| Melexis | BE | 2025-03-06T01:44:46.610464+00:00 | melexis.com |
| The 19 biggest gitlabs | 2025-03-05T23:55:01.894717+00:00 | — | |
| SCOLARO FETTER GRIZANTI & McGOUGH, P.C. (scolaro.com) | US | 2025-03-05T17:53:40.557073+00:00 | scolaro.com |
| Pampili (pampili.com.br) | BR | 2025-03-04T16:30:18.816044+00:00 | pampili.com.br |
| Grupo Baston Aerossol (baston.com.br) | BR | 2025-03-04T15:02:20.007913+00:00 | baston.com.br |
| Central McGowan (centralmcgowan.com) | US | 2025-03-03T12:57:25.364042+00:00 | centralmcgowan.com |
| Klesk Metal Stamping Co (kleskmetalstamping.com) | US | 2025-03-03T12:55:58.382726+00:00 | kleskmetalstamping.com |
| Gitlabs: Synelixis Solutions, INGV, VMO Holdings | 2025-02-26T21:56:02.178146+00:00 | — | |
| Bayteq | EC | 2025-02-23T18:47:35.910839+00:00 | bayteq.com |
| WDNA | ES | 2025-02-23T18:47:12.537320+00:00 | wdna.com |
| Naphix | AU | 2025-02-23T18:46:48.011590+00:00 | naphix.com |
| Gitlabs: Naphix, WDNA, Bayteq | 2025-02-23T18:22:40.164699+00:00 | — | |
| VISEO | FR | 2025-02-19T15:01:04.020563+00:00 | viseo.com |
| Next TI | ID | 2025-02-19T14:54:45.123806+00:00 | next-ti.co.id |
| Haggin Oaks Golf (hagginoaks.com) | US | 2025-02-19T11:52:38.092602+00:00 | hagginoaks.com |
| Gitlabs: Next TI, VISEO, Hochschule Trier | 2025-02-19T08:46:11.049744+00:00 | — | |
| Greencastle-Antrim Senior High School (gcasd.org) | US | 2025-02-17T14:21:57.450909+00:00 | gcasd.org |
| Pamrya.de | DE | 2025-02-16T11:05:15.383879+00:00 | pamyra.de |
| QBurst | IN | 2025-02-16T11:04:51.972779+00:00 | qburst.com |
| Acqua development | RO | 2025-02-16T11:04:28.034838+00:00 | acqua.ro |
| Gitlabs: Acqua development, QBurst, Pamyra.de | 2025-02-16T08:37:17.358069+00:00 | — | |
| ADULLACT | FR | 2025-02-13T21:12:21.104507+00:00 | adullact.net |
| Ayomi | FR | 2025-02-13T21:11:51.640536+00:00 | ayomi.fr |
| Omydoo | FR | 2025-02-13T21:11:27.596988+00:00 | omydoo.fr |
| Gitlabs: Omydoo, Ayomi, ADULLACT | 2025-02-13T21:03:45.717931+00:00 | — | |
| Mozo Grau (mozo-grau.com) | ES | 2025-02-13T17:05:53.254233+00:00 | mozo-grau.com |
| Squeezer-software | TN | 2025-02-12T17:18:58.690165+00:00 | squeezer-software.com |
| Spacemanic | CZ | 2025-02-12T17:18:27.717171+00:00 | spacemanic.com |
| INGV | IT | 2025-02-12T17:18:01.030947+00:00 | ingv.it |
| Gitlabs: INGV, Spacemanic, Squeezer-software | US | 2025-02-12T16:57:27.906929+00:00 | — |
| Hess (hess-gmbh.de) | DE | 2025-02-12T13:18:28.535346+00:00 | hess-gmbh.de |
| Saint George's College (saintgeorge.cl) | CL | 2025-02-11T17:35:20.572483+00:00 | saintgeorge.cl |
| The University of Notre Dame Australia (nd.edu.au) | AU | 2025-02-11T14:55:44.650487+00:00 | nd.edu.au |
| iRidge Inc. | JP | 2025-02-09T18:45:20.426239+00:00 | iridge.jp |
| Maxvy Technologies Pvt | IN | 2025-02-09T18:44:57.317350+00:00 | maxvytech.com |
| Universitatea Politehnica din Bucuresti | RO | 2025-02-09T18:44:32.917989+00:00 | upb.ro |
| Gitlabs: Universitatea Politehnica din Bucuresti, Maxvy Technologies Pvt, iRidge Inc. | 2025-02-09T11:38:11.793366+00:00 | — | |
| WJCC Public Schools (wjccschools.org) | US | 2025-03-06T15:52:41.300364+00:00 | wjccschools.org |
| 3SS | DE | 2025-02-07T23:45:54.696059+00:00 | 3ss.tv |
| Fligno | NO | 2025-02-07T23:45:51.139751+00:00 | fligno.com |
| Chalmers tekniska högskola | SE | 2025-02-07T23:45:26.351007+00:00 | chalmers.se |
| Gitlabs: Chalmers tekniska högskola, Fligno, 3SS | 2025-02-07T21:40:26.734008+00:00 | — | |
| DIEM | IT | 2025-02-06T07:59:31.201285+00:00 | diem.unisa.it |
| Top Systems | BR | 2025-02-06T07:59:06.925600+00:00 | topsystems.dev.br |
| eConceptions | PK | 2025-02-06T07:58:43.422241+00:00 | econceptions.mobi |
| Gitlabs: eConceptions, Top Systems, DIEM | 2025-02-06T07:54:56.947379+00:00 | — | |
| Devlion | IL | 2025-02-04T21:10:37.756161+00:00 | devlion.co.il |
| SOLEIL | FR | 2025-02-04T21:09:08.031210+00:00 | synchrotron-soleil.fr |
| hemio.de | DE | 2025-02-04T21:07:38.494073+00:00 | bhemio.de |
| Gitlabs: hemio.de, SOLEIL, Devlion | DE | 2025-02-04T20:19:45.659909+00:00 | — |
| Gitlabs: Bolin Centre for Climate Research, X-lab group, Madia | 2025-02-03T19:07:39.104041+00:00 | — | |
| Karadeniz Holding (karadenizholding.com) | TR | 2025-02-03T16:27:40.260377+00:00 | karadenizholding.com |
| Madia | NL | 2025-02-04T21:05:41.694413+00:00 | madia.nl |
| X-lab group | EG | 2025-02-04T21:04:12.700196+00:00 | xlab-group.com |
| Bolin Centre for Climate Research | SE | 2025-02-04T21:02:42.115294+00:00 | bolin.su.se |
| Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Cof... | ID | 2025-02-01T22:15:44.561900+00:00 | — |
| CIE | CZ | 2025-03-06T02:01:31.902654+00:00 | cie-group.cz |
| LUA Coffee | ID | 2025-02-04T21:13:12.392152+00:00 | lua.co.id |
| GFZ Helmholtz Centre for Geosciences | DE | 2025-02-04T21:12:48.416242+00:00 | gfz.de |
| PT. ITPRENEUR INDONESIA TECHNOLOGY | ID | 2025-02-04T21:12:41.553891+00:00 | itpi.co.id |
| Propulsion Academy AG | CH | 2025-02-04T21:18:56.818443+00:00 | propulsion-home.ch |
| X-Pans | FR | 2025-02-04T21:18:27.759021+00:00 | x-pans.com |
| Professional Computer Co., Ltd. | TH | 2025-02-04T21:18:01.573645+00:00 | pccth.com |
| Gitlabs: Professional Computer, X-Pans, Propulsion Academy AG | CH | 2025-01-30T20:59:46.612347+00:00 | — |
| Kombinat | AT | 2025-02-04T21:28:58.800841+00:00 | kombinat.at |
| HE2B | BE | 2025-02-04T21:28:35.131199+00:00 | he2b.be |
| Prasaga | US | 2025-02-04T21:28:11.960591+00:00 | prasaga.com |
| Gitlabs: Prasaga, HE2B, Kombinat | US | 2025-01-29T23:28:22.712611+00:00 | — |
| Boutin Jones (boutindentino.com) | US | 2025-01-29T11:59:22.397419+00:00 | boutindentino.com |
| De La Salle High School (dlshs.org) | US | 2025-01-24T12:34:34.413557+00:00 | dlshs.org |
| ELTEK Group (eltekgroup.com) | IT | 2025-01-24T12:01:39.349022+00:00 | eltekgroup.com |
| Kooijman Vianen (kooijmanvianen.nl) | NL | 2025-01-23T17:38:10.583629+00:00 | kooijmanvianen.nl |
| SciTech Services, Inc. | US | 2025-01-14T12:30:06.478407+00:00 | scitechinc.com |
| Buttery (butterycompany.com) | US | 2025-01-14T12:29:00.384079+00:00 | butterycompany.com |
| Aurora Public Schools (aurorak12.org) | US | 2025-02-11T16:24:23.202750+00:00 | aurorak12.org |
| The University of Oklahoma (ou.edu) | US | 2025-01-14T12:31:12.197469+00:00 | ou.edu |
| Saint-Bar (saintbar.be) | BE | 2025-01-07T20:17:29.266961+00:00 | saintbar.be |
| Ober Mountain (OberGatlinburg.com) | US | 2024-12-26T20:18:07.398136+00:00 | OberGatlinburg.com |
| Aroma Housewares Co (Aromaco.com) | US | 2024-12-25T17:19:11.543324+00:00 | aromaco.com |
| RODS Surveying (rods.cc) | AU | 2024-12-23T16:09:15.422371+00:00 | rods.cc |
| Forum Architecture & Interior Design (forumarchitecture.com) | US | 2024-12-23T13:19:37.622431+00:00 | forumarchitecture.com |
| Gallade Chemical (galladechem.com) | US | 2024-12-23T13:18:39.088512+00:00 | galladechem.com |
| Industria e Comercio Jolitex Ltda (jolitex.com) | BR | 2024-12-23T13:17:38.420691+00:00 | jolitex.com |
| Schenkelberg - Die Medienstrategen (schenkelberg-druck.de) | DE | 2024-12-20T15:18:28.591413+00:00 | schenkelberg-druck.de |
| Village Community School (vcsnyc.org) | US | 2024-12-20T15:17:30.525659+00:00 | vcsnyc.org |
| Circle Electric (circleelectric.com) | US | 2024-12-20T15:16:31.796998+00:00 | circleelectric.com |
| Howell Township Public Schools (howell.k12.nj.us) | US | 2024-12-20T13:20:16.173164+00:00 | howell.k12.nj.us |
| EP Holdings (epholdingsinc.com) | US | 2024-12-20T13:19:16.880657+00:00 | epholdingsinc.com |
| Jet Edge (jetedgewaterjets.com) | US | 2024-12-20T04:22:31.387142+00:00 | jetedgewaterjets.com |
| Energy Capital Credit Union (eccu.net) | US | 2024-12-20T04:21:26.459220+00:00 | eccu.net |
| Vroninks Ricker Weyts & Sacre- Notaires (notassoc.be) | BE | 2024-12-18T16:54:08.963129+00:00 | notassoc.be |
| Reliance Connects (relianceconnects.com) | US | 2024-12-18T16:53:09.256458+00:00 | relianceconnects.com |
| SpeedLine Solutions (speedlinesolutions.com) | CA | 2024-12-17T14:22:00.812191+00:00 | speedlinesolutions.com |
| Ouro Verde (ouroverde.net.br) | BR | 2024-12-17T12:34:41.225447+00:00 | ouroverde.net.br |
| Cognity (cognity.gr) | GR | 2024-12-16T18:55:46.588866+00:00 | cognity.gr |
| Waverley Christian College (wcc.vic.edu.au) | AU | 2024-12-16T18:54:48.068177+00:00 | wcc.vic.edu.au |
| Planters Telephone Cooperative (planters.net) | US | 2024-12-11T16:44:20.317847+00:00 | planters.net |
| OmniRide (omniride.com) | US | 2025-01-10T12:20:16.564027+00:00 | omniride.com |
| Dorner (dorner-gmbh.de) | DE | 2024-12-05T15:09:52.317289+00:00 | dorner-gmbh.de |
| Conlin's Pharmacy (conlinspharmacy.com) | IE | 2024-12-02T14:10:40.022579+00:00 | conlinspharmacy.com |
| Weld Racing (weldracing.com) | US | 2024-11-29T13:03:37.869094+00:00 | weldracing.com |
| Bedminster School (bedminsterschool.org) | US | 2024-11-28T12:51:42.334540+00:00 | bedminsterschool.org |
| Chanas Assurances S.A. (chanasassurances.com) | CM | 2024-11-28T15:36:41.017808+00:00 | chanasassurances.com |
| ALLTUB Group (alltub.com) | FR | 2024-11-28T14:07:41.210153+00:00 | alltub.com |
| WPM Pathology Laboratory (wpmpath.com) | AU | 2024-11-28T11:02:22.039773+00:00 | wpmpath.com |
| Gruber Tool & Die (grubertool.com) | US | 2024-11-27T16:55:15.297166+00:00 | grubertool.com |
| Signal Health Washington (signalhealthwa.com) | US | 2024-11-27T14:07:50.803238+00:00 | signalhealthwa.com |
| Pioneer Urban Land & Infrastructure (pioneerurban.in) | IN | 2024-11-26T16:39:55.598685+00:00 | pioneerurban.in |
| Pinnacle Plastic Products (pinnacleplasitcporducts.com) | US | 2024-11-26T16:38:56.848410+00:00 | pinnacleplasitcporducts.com |
| Complete Recycling Services (completerecyclingservices.com) | US | 2024-11-26T16:37:55.558671+00:00 | completerecyclingservices.com |
| Marketing Incentives (leinsterappointments.ie) | IE | 2024-11-26T14:42:41.509068+00:00 | leinsterappointments.ie |
| Metroline (metrolinedirect.com) | US | 2024-11-26T13:08:30.159583+00:00 | metrolinedirect.com |
| Hogan Mfg (hoganmfg.com) | US | 2024-11-21T14:38:30.074738+00:00 | hoganmfg.com |
| Fifteenfortyseven Critical Systems Realty (1547realty.com) | US | 2024-11-21T14:37:30.376966+00:00 | 1547realty.com |
| Burkburnett Independent School District | US | 2024-11-19T18:09:39.421375+00:00 | burkburnettisd.org |
| Valley Planing Mill (valleyplaning.com) | US | 2024-11-19T18:08:38.173706+00:00 | valleyplaning.com |
| Waters Truck and Tractor (waterstruck.com) | US | 2024-11-18T15:44:59.546776+00:00 | waterstruck.com |
| Vector Transport (vectortransport.com) | IN | 2024-11-15T19:06:14.135319+00:00 | vectortransport.com |
| Cape Cod Regional Technical High School (capetech.us) | US | 2024-11-06T15:17:15.137363+00:00 | capetech.us |
| GSR Andrade Architects (gsr-andrade.com) | BR | 2024-11-06T15:16:16.549693+00:00 | gsr-andrade.com |
| Askling Car (asklingbil.se) | SE | 2024-10-31T15:21:58.305376+00:00 | asklingbil.se |
| Jillamy (jillamy.com) | US | 2024-10-30T15:55:05.654361+00:00 | jillamy.com |
| SmartSource (smartsource-inc.com) | US | 2024-10-30T14:00:06.220101+00:00 | smartsource-inc.com |
| Jordan Public Schools (https://www.jordan.k12.mn.us/) | US | 2024-10-29T13:43:35.442709+00:00 | jordan.k12.mn.us |
| Sage Automotive Interior (sageautomotiveinteriors.com) | US | 2024-10-29T12:23:46.207903+00:00 | sageautomotiveinteriors.com |
| Evergreen SD50 (evergreensd50.com) | CA | 2024-10-28T13:17:17.008575+00:00 | evergreensd50.com |
| Evergreen Local School District (evgvikings.org) | US | 2024-10-25T13:10:45.581201+00:00 | evgvikings.org |
| Value City NJ (valuecitynj.com) | US | 2024-10-24T15:35:54.069486+00:00 | valuecitynj.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron