Actor Profile

🏹 L Group — Ransomware

🔄 Pivot:🌎 US 🏹 L Group

Classification

Ransomware

Leak-site victims

Ransomware.live

Associated IoCs

local intel

MITRE techniques

—

ATT&CK

Tracked

Yes

Ransomware.live

PIVOT🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🔥 Leak-Site Victims (26)

Victim	Country	Published	Domain
cookieskids.com	US	2026-08-07T08:28:22.404991+00:00	`cookieskids.com`
www.upbrand.com	US	2026-08-07T08:29:24.233315+00:00	`www.upbrand.com`
doclv.com	LV	2026-08-07T08:30:02.229564+00:00	`doclv.com`
onsite-eng.ca	CA	2026-08-07T08:30:43.021412+00:00	`onsite-eng.ca`
zuckers.com	DE	2026-08-07T08:31:26.394892+00:00	`zuckers.com`
coastproduce.com	AU	2026-08-07T08:32:04.056448+00:00	`coastproduce.com`
www.racheljulien.com	CA	2026-08-07T08:32:38.856336+00:00	`www.racheljulien.com`
gslusa.com	US	2026-08-07T08:33:15.715212+00:00	`gslusa.com`
immobilia.hu	HU	2026-08-07T08:33:52.346025+00:00	`immobilia.hu`
nokotapackers.com	US	2026-08-07T08:34:34.500658+00:00	`nokotapackers.com`
daycohost.com	US	2026-08-07T08:35:48.952390+00:00	`daycohost.com`
venezolanadepinturas.com	VE	2026-08-07T08:35:10.525549+00:00	`venezolanadepinturas.com`
brdigital.net.br	BR	2026-08-07T08:36:27.054028+00:00	`brdigital.net.br`
ratnasagar.com	IN	2026-08-07T08:37:05.240968+00:00	`ratnasagar.com`
bouygues-es.fr	FR	2026-08-07T08:38:25.287304+00:00	`bouygues-es.fr`
ferretornillos.com	MX	2026-08-07T08:37:47.874371+00:00	`ferretornillos.com`
psec.com.ar	AR	2026-08-07T08:39:00.072602+00:00	`psec.com.ar`
automobile-mueller.info	DE	2026-08-07T08:40:48.457569+00:00	`automobile-mueller.info`
laticrete.com.cn	CN	2026-08-07T08:40:13.206193+00:00	`laticrete.com.cn`
mygoalseek.com	US	2026-08-07T08:39:36.017510+00:00	`mygoalseek.com`
atp.chaco.gob.ar	AR	2026-08-07T08:42:04.862564+00:00	`atp.chaco.gob.ar`
l-a.com.vn	VN	2026-08-07T08:41:27.133685+00:00	`l-a.com.vn`
jean-petit.lu	LU	2026-08-07T08:42:39.985062+00:00	`jean-petit.lu`
rosekennedygreenway.org	US	2026-08-07T08:43:19.578896+00:00	`rosekennedygreenway.org`
ausfec1.com.au	AU	2026-08-07T08:43:57.292958+00:00	`ausfec1.com.au`
uva.edu.br	BR	2026-08-07T08:44:35.850350+00:00	`uva.edu.br`

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

📁 Case Management

Attach to case

Role

+ New case from this

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🏹 Add to case

Attach L Group (Actor / APT) and pull all linked entities: pull linked

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →

Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook