🏹 J — Ransomware
J is an emerging ransomware group that launched its leak site in May 2025, claiming over 41 victims by late 2025 including FAI Aviation Group (Germany), operating primarily as a leak-site-centric extortion identity with limited public technical analysis.
Classification
Ransomware
Leak-site victims
41
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (41)
| Victim | Country | Published | Domain |
|---|---|---|---|
| ikad.com.au - A 5-Month Staycation in the Defense Supply Chain | AU | 2025-11-09T22:08:43.204874+00:00 | ikad.com.au |
| ****.com.au | 2025-11-01T17:08:44.695763+00:00 | — | |
| Dimensional Control Systems (3dcs.com) | US | 2025-10-01T15:46:42.092381+00:00 | 3dcs.com |
| multi-media systeme AG (mmsag.de) | DE | 2025-09-30T21:46:19.765481+00:00 | mmsag.de |
| AZpro Group (azprogroup.com) | US | 2025-09-30T07:45:44.271287+00:00 | azprogroup.com |
| Petro-Diamond (petrodiamond.com) - subsidiary of Mitsubishi Corporation | JP | 2025-09-29T15:43:28.136492+00:00 | petrodiamond.com |
| J. E. Stacey & Co. Ltd (jestacey.com) | GB | 2025-09-29T13:46:03.239304+00:00 | jestacey.com |
| raimore.com | JP | 2025-09-29T13:45:20.914057+00:00 | raimore.com |
| Virtual Projects (virtualprojects.build) | DK | 2025-09-29T13:44:41.396524+00:00 | virtualprojects.build |
| FAI Aviation Group (fai.ag) - The biggest leak ever | DE | 2025-09-23T21:47:58.769305+00:00 | fai.ag |
| a********p.com | 2025-08-14T08:16:36.257776+00:00 | — | |
| aym.com.mx | MX | 2025-08-05T14:10:10.953770+00:00 | aym.com.mx |
| ppmrecruit.com | GB | 2025-08-05T14:09:18.196413+00:00 | ppmrecruit.com |
| bridgerecruit.co.uk | GB | 2025-07-31T20:17:13.678874+00:00 | bridgerecruit.co.uk |
| restiani.com | IT | 2025-07-30T13:35:35.017825+00:00 | restiani.com |
| southweststone.net | US | 2025-08-20T09:07:23.751426+00:00 | southweststone.net |
| sou***********.net | 2025-07-28T20:17:35.161549+00:00 | — | |
| gimaex.com | FR | 2025-07-30T07:34:37.261053+00:00 | gimaex.com |
| diffazur.fr | FR | 2025-06-20T12:36:08.721257+00:00 | diffazur.fr |
| powells.biz | US | 2025-06-20T12:37:00.055419+00:00 | powells.biz |
| cisin.com | IN | 2025-06-20T12:37:54.361655+00:00 | cisin.com |
| rhodar.co.uk | GB | 2025-06-21T21:35:50.937703+00:00 | rhodar.co.uk |
| fecovita.com | AR | 2025-06-21T21:36:45.669772+00:00 | fecovita.com |
| immobilia.hu | HU | 2025-06-01T00:38:33.784405+00:00 | immobilia.hu |
| nokotapackers.com | IN | 2025-06-01T00:55:21.840011+00:00 | nokotapackers.com |
| venezolanadepinturas.com | VE | 2025-06-02T12:15:50.340103+00:00 | venezolanadepinturas.com |
| daycohost.com | VE | 2025-06-01T00:56:30.283071+00:00 | daycohost.com |
| brdigital.net.br | BR | 2025-05-12T17:17:57.442204+00:00 | brdigital.net.br |
| ratnasagar.com | IN | 2025-05-12T17:19:29.405053+00:00 | ratnasagar.com |
| bouygues-es.fr | FR | 2025-05-12T17:22:28.595047+00:00 | bouygues-es.fr |
| ferretornillos.com | ES | 2025-05-12T17:20:59.755892+00:00 | ferretornillos.com |
| psec.com.ar | AR | 2025-05-12T17:23:59.795965+00:00 | psec.com.ar |
| automobile-mueller.info | DE | 2025-05-02T07:22:41.408860+00:00 | automobile-mueller.info |
| laticrete.com.cn | CN | 2025-05-02T07:21:10.858030+00:00 | laticrete.com.cn |
| mygoalseek.com | US | 2025-05-02T07:19:36.198244+00:00 | mygoalseek.com |
| atp.chaco.gob.ar | AR | 2025-05-02T07:25:42.402093+00:00 | atp.chaco.gob.ar |
| l-a.com.vn | VN | 2025-05-02T07:24:12.259314+00:00 | l-a.com.vn |
| jean-petit.lu | LU | 2025-05-02T07:27:20.913181+00:00 | jean-petit.lu |
| rosekennedygreenway.org | US | 2025-05-02T07:28:53.928887+00:00 | rosekennedygreenway.org |
| ausfec1.com.au | AU | 2025-05-02T07:30:24.311150+00:00 | ausfec1.com.au |
| uva.edu.br | BR | 2025-05-02T07:31:21.203521+00:00 | uva.edu.br |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron