🏹 NoEscape — Ransomware
NoEscape was a RaaS operation active from May to December 2023 believed to be a rebrand of the defunct Avaddon ransomware, targeting professional services, manufacturing, and healthcare with triple-extortion capabilities (encryption, data theft, and optional DDoS), before abruptly shutting down in an apparent exit scam.
Classification
Ransomware
Leak-site victims
126
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (126)
| Victim | Country | Published | Domain |
|---|---|---|---|
| University of Hawaii | US | 2023-06-20T11:03:50.948338+00:00 | hawaii.edu |
| UF Resources | 2023-12-04T08:56:33.596157+00:00 | ufresources.com | |
| Nida Corp | 2023-12-04T08:55:43.651980+00:00 | nida.com | |
| Grupo PRIDES | 2023-12-01T07:06:51.596832+00:00 | grupoprides.com | |
| Science History Institute | 2023-11-30T05:29:44.500125+00:00 | sciencehistory.org | |
| Verdecora | ES | 2023-11-30T02:32:42.431047+00:00 | verdecora.es |
| TALENTUM Temporal SAS | CO | 2023-11-24T20:48:30.216307+00:00 | talentum.com.co |
| PruittHealth | 2023-11-18T04:12:17.620744+00:00 | pruitthealth.com | |
| Rc Moore Inc | 2023-11-21T02:46:18.262756+00:00 | rcmoore.com | |
| Enware Australia Pty Ltd | AU | 2023-11-21T02:45:44.880912+00:00 | enware.com.au |
| Kwik Industries, Inc. | 2023-11-17T16:11:40.815059+00:00 | kwikind.com | |
| Lander County Convention & Tourism Authority | 2023-11-14T07:08:56.532114+00:00 | landercountynv.org | |
| PAR Group Co | 2023-11-11T17:36:38.394122+00:00 | pargroup.com | |
| Putzel Electrical Contractors Inc | US | 2023-11-13T04:07:08.621357+00:00 | putzelelectric.com |
| Mpr Lifts | SE | 2023-11-13T04:07:42.492767+00:00 | mprlift.se |
| Ezi Floor Products | AU | 2023-11-09T19:05:22.860041+00:00 | ezifloor.com.au |
| Jeffcoat Mechanical Services Inc | US | 2023-11-09T11:39:19.576737+00:00 | jeffcoat.us |
| Action Santé Travail | FR | 2023-11-09T22:11:43.158925+00:00 | actionsantetravail.fr |
| OE Federal Credit Union | 2023-11-08T05:36:17.879915+00:00 | oefederal.org | |
| Carespring | US | 2023-11-14T04:07:07.656009+00:00 | carespring.com |
| Avianor Group | CA | 2023-11-08T05:35:44.276293+00:00 | avianor.com |
| Agile Display Solutions | 2023-11-03T04:23:05.359195+00:00 | agiledisplaysolutions.com | |
| Vinovalie | 2023-11-01T05:40:25.440965+00:00 | vinovalie.com | |
| labor force Inc | 2023-11-03T05:38:52.102306+00:00 | laborforce.com | |
| Southeastern Orthopaedic Specialists | 2023-11-14T07:08:21.888550+00:00 | sosbonedocs.com | |
| Schwob AG | CH | 2023-11-02T05:36:19.554134+00:00 | schwob.swiss |
| R N Wooler & Co Ltd | GB | 2023-11-02T05:35:41.025253+00:00 | rnwooler.co.uk |
| Dynametal Technologies Inc | 2023-10-31T07:24:33.398608+00:00 | dynametal.com | |
| Spolzino Termosanitari Srl | 2023-10-31T07:22:24.638907+00:00 | spolzino.com | |
| PR Clinical | 2023-10-31T07:21:49.869445+00:00 | prclinical.com | |
| McKeag & Co | 2023-10-31T07:20:38.744743+00:00 | mckeagandco.com | |
| STRUMET | PL | 2023-10-31T07:19:47.522598+00:00 | strumet.pl |
| St Raphael'S Hospice | GB | 2023-10-31T07:18:59.636062+00:00 | straphaels.org.uk |
| Two Saints | GB | 2023-10-31T07:18:03.728477+00:00 | twosaints.org.uk |
| Florists Supply Ltd | CA | 2023-10-24T21:04:51.793861+00:00 | floristssupply.com |
| Penfield Fire Company | 2023-10-23T16:19:18.983031+00:00 | penfieldfire.org | |
| Korea Petroleum Industries Company | 2023-10-23T16:18:43.314366+00:00 | koreapetroleum.com | |
| Gasmart Organization | MX | 2023-10-23T16:18:07.414773+00:00 | gasmart.mx |
| KBS Accountants, Tax Specialists & Lawyers | NL | 2023-10-23T16:17:22.800527+00:00 | kbs-accountants.nl |
| INSTANT ACCESS | KW | 2023-10-23T16:16:46.440567+00:00 | instantaccess-co.com |
| Misterminit | 2023-10-23T16:16:11.017704+00:00 | misterminit.eu | |
| Central University of Bayamón | PR | 2023-10-23T16:15:35.341377+00:00 | ucb.edu.pr |
| Motorcycles of Charlotte & Greensboro | 2023-10-23T16:14:59.889024+00:00 | bmw-ducati.com | |
| International Community Schools | 2023-10-23T16:14:24.170992+00:00 | icschool-uae.com | |
| Orion Township Public Library | 2023-11-08T16:13:29.509094+00:00 | orionlibrary.org | |
| KBS Accountants | NL | 2023-10-18T08:42:04.877279+00:00 | kbs-accountants.nl |
| Gasmart | MX | 2023-10-17T04:13:36.829285+00:00 | gasmart.mx |
| Mount Holly Nissan | 2023-10-16T16:13:04.737772+00:00 | mthollynissan.com | |
| LDLC ASVEL | FR | 2023-10-11T22:10:17.995965+00:00 | ldlcasvel.com |
| Instant Access Co | 2023-10-11T20:41:15.754895+00:00 | instantaccess-co.com | |
| GEACAM | ES | 2023-10-09T22:15:58.390336+00:00 | geacam.es |
| Korea Petroleum Industrial Co. Ltd | 2023-10-13T17:47:44.947522+00:00 | koreapetroleum.com | |
| Seattle Housing Authority | 2023-10-12T17:45:25.091370+00:00 | seattlehousing.org | |
| Granger Medical Clinic | 2023-10-06T02:47:02.416676+00:00 | grangermedical.com | |
| Effigest Capital Services | FR | 2023-10-10T23:49:59.045011+00:00 | effigest.fr |
| Elbe-Obst Fruchtverarbeitung GmbH | DE | 2023-10-10T01:16:00.644788+00:00 | fruchtverarbeitung.de |
| Penfield Fire Co | 2023-10-09T23:51:04.827991+00:00 | penfieldfire.org | |
| Centre Du Sablon | 2023-10-09T22:16:34.238271+00:00 | centredusablon.com | |
| Order of Psychologists of Lombardy | IT | 2023-10-23T16:13:45.064956+00:00 | opl.it |
| Ordine Degli Psicologi Della Lombardia | IT | 2023-10-10T01:15:23.294864+00:00 | opl.it |
| Healthy Baby Essentials Inc | 2023-10-05T02:45:36.845169+00:00 | breastpumps.com | |
| Kentie Systeemtechniek BV | NL | 2023-09-28T10:11:42.008106+00:00 | kentie.nl |
| City of Victorville | US | 2023-10-24T21:04:13.821686+00:00 | victorvilleca.gov |
| El Colegio De San Luis | MX | 2023-10-03T02:41:37.345656+00:00 | colsan.edu.mx |
| SEFAG Zrt | HU | 2023-10-03T02:41:02.194526+00:00 | sefag.hu |
| BELLSONICA CORPORATION | JP | 2023-10-03T02:40:25.551451+00:00 | bellsonica.co.jp |
| Scara | FR | 2023-09-26T23:48:56.416505+00:00 | scara.fr |
| Waterloo Media | 2023-09-26T02:42:24.548102+00:00 | waterloomedia.com | |
| Powerhouse Retail Services LLC | 2023-09-26T01:12:58.395360+00:00 | powerhousenow.com | |
| Leekes Ltd | GB | 2023-09-24T19:15:26.081750+00:00 | leekes.co.uk |
| BPR Properties LLC | 2023-09-23T09:58:30.843126+00:00 | bpr-properties.com | |
| Kool-Air Inc | 2023-09-20T16:17:49.924649+00:00 | kool-air-inc.com | |
| IKP | AT | 2023-09-20T16:17:50.892418+00:00 | ikp.at |
| Küng Ag Bern | CH | 2023-09-20T16:17:48.626163+00:00 | kuengbern.ch |
| Fondation Vincent De Paul | 2023-09-14T07:11:52.997469+00:00 | fondation-vincent-de-paul.org | |
| EDUCAL, SA de CV | MX | 2023-09-14T07:11:21.526782+00:00 | educal.com.mx |
| International Joint Commission | US | 2023-09-11T20:42:35.404280+00:00 | ijc.org |
| Infinity Construction Company | 2023-09-05T17:41:21.645324+00:00 | infinityconstruction.com | |
| AdSage Technology Co., Ltd. | CN | 2023-09-11T19:12:25.383032+00:00 | adsage.com |
| Altmann Dental GmbH & Co KG | DE | 2023-09-11T19:12:56.623862+00:00 | altmanndental.de |
| Mulkay Cardiology Consultants | 2023-09-04T19:07:59.141207+00:00 | mulkaycardiology.com | |
| Omniatel | IT | 2023-09-07T14:33:43.719126+00:00 | omniatel.it |
| HBME LLC | 2023-09-04T19:07:31.207986+00:00 | hbme.com | |
| GORDON, MUIR & FOLEY LLP | 2023-09-02T05:33:25.947962+00:00 | gmflaw.com | |
| Rs Logistics Ltd | 2023-09-02T05:32:57.149674+00:00 | rslog.com | |
| QI Holdings Ltd. | 2023-08-28T22:12:20.107031+00:00 | qigroup.com | |
| Northwave s.r.l. | IT | 2023-09-04T19:07:02.329817+00:00 | northwave.it |
| Pasquale Bruni Ltd | 2023-08-30T04:13:28.423038+00:00 | pasqualebruni.com | |
| Iina Ba Inc | 2023-08-28T20:39:40.867560+00:00 | iinaba.com | |
| Gujarat Industries Power Company Ltd. | IN | 2023-08-26T05:41:16.473418+00:00 | gipcl.com |
| Ningbo Yinzhou Vocational High School | 2023-08-30T01:10:58.976047+00:00 | yxzg.net | |
| Fiocruz | BR | 2023-08-25T01:07:14.859183+00:00 | fiocruz.br |
| Softverg Co., Ltd. | KR | 2023-08-22T01:04:52.949141+00:00 | softverk.co.kr |
| FYTISA Industrial Felts and FabricsSL | 2023-08-22T01:04:46.866247+00:00 | fytisa.com | |
| Infuance Communication Inc | 2023-08-22T01:04:40.672559+00:00 | influencecommunication.com | |
| au Domain Administration Ltd | AU | 2023-08-18T02:40:38.869150+00:00 | auda.org.au |
| Contact 121 Pty Ltd | AU | 2023-08-17T23:40:50.074499+00:00 | contact121.com.au |
| FTRIA CO. LTD | JP | 2023-08-15T20:36:11.793952+00:00 | ftria.co.jp |
| Fondation De Verdeil | CH | 2023-08-15T01:02:58.972473+00:00 | verdeil.ch |
| John L Lowery & Associates | 2023-08-14T16:04:17.490454+00:00 | johnllowery.com | |
| Lower Yukon School District | 2023-08-09T18:04:55.708315+00:00 | lysd.org | |
| Federal Bar Association | DE | 2023-08-14T16:03:50.446387+00:00 | brak.de |
| Kreacta | 2023-08-07T11:19:16.333640+00:00 | kreacta.com | |
| Republican Vilnius Psychiatric Hospital | LT | 2023-08-07T11:19:48.900558+00:00 | rvpl.lt |
| Avertronics Inc | 2023-08-07T11:20:21.692828+00:00 | avertronics.com | |
| Newton IT Solutions | GB | 2023-08-01T08:50:26.499681+00:00 | newtonit.co.uk |
| Grupo SCA - Business Information | ES | 2023-08-02T16:07:46.871865+00:00 | gruposca.com |
| Garac - Business Information | 2023-07-31T13:03:11.736490+00:00 | garac.com | |
| Fushimitsu Gumi Co., Ltd | 2023-07-31T13:02:37.952224+00:00 | fushimitsu.com | |
| Ville de Chevilly-Larue | FR | 2023-07-26T21:03:01.619197+00:00 | ville-chevilly-larue.fr |
| BEIJER REF | ES | 2023-07-26T21:02:35.214587+00:00 | beijer.es |
| Addison Electronique | 2023-07-26T21:02:07.667576+00:00 | addison-electronique.com | |
| Corinium Carpets | GB | 2023-07-20T18:10:07.181121+00:00 | coriniumcarpets.co.uk |
| Rampi Srl | 2023-07-25T16:06:33.334974+00:00 | rampi.com | |
| Acomen | FR | 2023-07-18T16:06:15.439029+00:00 | acomen.fr |
| Girardini Holding Srl | IT | 2023-07-18T15:03:35.447197+00:00 | girardini.it |
| Jordan Airmotive Ltd | JO | 2023-07-14T15:05:52.774771+00:00 | jordanairmotive.com |
| Burton & South Derbyshire College | GB | 2023-07-14T15:05:22.111462+00:00 | bsdc.ac.uk |
| Protactics | CO | 2023-07-12T08:00:42.392140+00:00 | protactics.com.co |
| Innodis Group | MU | 2023-07-12T17:06:55.621099+00:00 | innodisgroup.com |
| Credit Team | 2023-06-23T18:00:17.409962+00:00 | creditteam.eu | |
| Promotion Fulfillment Center | 2023-06-20T11:04:21.047432+00:00 | pfcfulfills.com | |
| Cyril Johnston Hire | GB | 2023-06-20T18:07:41.237646+00:00 | cjhire.co.uk |
| Centre Hospitalier Régional de Namur | BE | 2023-06-14T12:54:49.529323+00:00 | chrn.be |
| CASTEC Inc | 2023-06-12T15:37:29.588450+00:00 | castec.com | |
| Doesburg Components | NL | 2023-06-12T15:37:59.648631+00:00 | doesburg-comp.nl |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron