Actor Profile

🏹 RansomHub — Ransomware

The group emerged in mid-February 2024 and has already listed several organizations as alleged victims of their attacks, resulting from extortion through encryption and data leaks.<br> <br> The announcement of the sale of the new Ransomware-as-a-Service (RaaS) by RansomHub was published on one of the Russian-origin forums used by cybercrime to advertise malicious services, known as RAMP4U (or RAMP). A user with the nickname and persona of 'koley' announced the affiliate program on February 2, 2024.<br> <br> In the new RaaS announcement, it was mentioned that the money laundering operation of t

🔄 Pivot:🌎 US 🏹 RansomHub

Classification

Ransomware

Leak-site victims

842

Ransomware.live

Associated IoCs

local intel

MITRE techniques

—

ATT&CK

Tracked

Yes

Ransomware.live

PIVOT🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🔥 Leak-Site Victims (842)

Victim	Country	Published	Domain
Universidad Nacional Autónoma de México	MX	2024-05-03T14:31:28.854001+00:00	`unam.mx`
www.taperuvicha.com	AR	2024-09-18T09:17:43.312266+00:00	`taperuvicha.com`
intellioan.com	US	2025-03-31T23:21:00.788113+00:00	`intellioan.com`
delta-life.com	DE	2025-03-31T21:38:49.040361+00:00	`delta-life.com`
jackpotjunction.com	US	2025-03-31T23:19:21.968112+00:00	`jackpotjunction.com`
phaus.us&phakr.com&phabodysystems.com	US	2025-03-28T21:40:30.002028+00:00	`phaus.us`
europtec.com	DE	2025-03-31T21:40:34.981836+00:00	`europtec.com`
www.bassi.it	IT	2025-03-28T18:50:56.516144+00:00	`bassi.it`
www.allmilmoe.com	DE	2025-03-28T00:12:30.966656+00:00	`allmilmoe.com`
www.fkm-elemente.de	DE	2025-03-26T22:25:19.664777+00:00	`fkm-elemente.de`
brattenelectrictn.com	US	2025-03-27T15:11:21.075760+00:00	`brattenelectrictn.com`
www.afnigc.ca	CA	2025-03-25T14:51:37.031549+00:00	`afnigc.ca`
www.hongthongrice.com	TH	2025-03-26T22:27:11.597019+00:00	`hongthongrice.com`
texascompressionservices.com	US	2025-03-24T21:39:19.385368+00:00	`texascompressionservices.com`
mnm.hu	HU	2025-03-24T21:40:34.178274+00:00	`mnm.hu`
OMLTD.CO.JP	JP	2025-03-24T21:45:11.534642+00:00	`OMLTD.CO.JP`
technicare.com	US	2025-03-24T21:43:41.402320+00:00	`technicare.com`
cisd.org	US	2025-03-24T21:42:06.531000+00:00	`cisd.org`
www.rivaldt.com	BR	2025-03-24T21:46:41.901858+00:00	`rivaldt.com`
www.solidworld.it	IT	2025-03-24T21:49:35.579486+00:00	`solidworld.it`
www.avalonapparel.com	US	2025-03-21T18:38:58.059125+00:00	`avalonapparel.com`
www.core-1.com		2025-03-21T18:42:17.662554+00:00	`core-1.com`
www.sinkdirect.com	US	2025-03-21T18:53:54.089615+00:00	`sinkdirect.com`
www.elizajennings.org	US	2025-03-21T18:55:41.937006+00:00	`elizajennings.org`
www.ahmadiyya.ca	CA	2025-03-21T18:57:25.137523+00:00	`ahmadiyya.ca`
www.abmenviro.ca	CA	2025-03-21T19:00:38.474074+00:00	`abmenviro.ca`
www.engines.man.eu	DE	2025-03-21T19:02:46.651416+00:00	`engines.man.eu`
www.gestionquintessence.com	CA	2025-03-21T19:04:36.166927+00:00	`gestionquintessence.com`
www.scpautomation.com	CA	2025-03-21T19:06:15.355507+00:00	`scpautomation.com`
gbsn.com.br	BR	2025-03-21T22:04:51.255975+00:00	`gbsn.com.br`
www.cormidom.com.do	DO	2025-03-25T14:49:18.471792+00:00	`cormidom.com.do`
ccktech.com	GB	2025-03-17T21:14:01.735461+00:00	`ccktech.com`
www.baxterlaboratories.com	AU	2025-03-17T21:15:36.329486+00:00	`baxterlaboratories.com`
controlledair.com	US	2025-03-19T17:44:08.255225+00:00	`controlledair.com`
www.mslglobalexp.com	IN	2025-03-21T00:42:02.785668+00:00	`mslglobalexp.com`
www.ameda.com	US	2025-03-16T20:37:22.221228+00:00	`ameda.com`
www.solinst.com	CA	2025-03-21T18:49:37.967399+00:00	`solinst.com`
idcconstruction.com	US	2025-03-14T17:39:43.705117+00:00	`idcconstruction.com`
jennyyoo.com	US	2025-03-14T14:39:58.266238+00:00	`jennyyoo.com`
www.DSelectrical.com	US	2025-03-26T07:16:49.536952+00:00	`DSelectrical.com`
dtrglaw.com	US	2025-03-14T08:43:23.551855+00:00	`dtrglaw.com`
www.parklandmanufacturing.com		2025-03-21T18:51:35.054835+00:00	`parklandmanufacturing.com`
www.carolinaac.com	US	2025-03-25T15:03:10.813244+00:00	`carolinaac.com`
www.creativelogisticservices.com	US	2025-03-25T14:53:19.307244+00:00	`creativelogisticservices.com`
www.ripplejunction.com	US	2025-03-25T14:54:47.620466+00:00	`ripplejunction.com`
www.oneupinnovations.com	US	2025-03-21T18:37:18.880748+00:00	`oneupinnovations.com`
www.janvier-labs.com	FR	2025-03-20T17:10:09.807759+00:00	`janvier-labs.com`
www.gcsnet.com		2025-03-21T18:43:53.678963+00:00	`gcsnet.com`
www.garbinc.com	US	2025-03-25T15:01:19.696361+00:00	`garbinc.com`
www.mododoc.com	US	2025-03-25T14:58:47.609793+00:00	`mododoc.com`
www.lions-online.org	DE	2025-03-25T14:47:09.130052+00:00	`lions-online.org`
total-ps.com	US	2025-03-07T22:00:52.755649+00:00	`total-ps.com`
srmg.com.au	AU	2025-03-07T11:38:59.992421+00:00	`srmg.com.au`
wheats.com	US	2025-03-07T11:40:38.941723+00:00	`wheats.com`
www.argentosc.com	AR	2025-03-25T14:56:55.036191+00:00	`argentosc.com`
www.njcalwe.com		2025-03-21T18:45:43.875603+00:00	`njcalwe.com`
hickorylaw.com	US	2025-03-06T16:35:19.609406+00:00	`hickorylaw.com`
mitchellmcnutt.com	US	2025-03-08T20:28:03.791878+00:00	`mitchellmcnutt.com`
www.broadmoormethodist.org	US	2025-03-21T18:52:02.720546+00:00	`broadmoormethodist.org`
www.esquirebrands.com	US	2025-03-21T18:40:37.741319+00:00	`esquirebrands.com`
www.convention.qc.ca	CA	2025-03-06T16:37:06.333802+00:00	`convention.qc.ca`
www.sunsweet.com	US	2025-03-05T11:35:55.518646+00:00	`sunsweet.com`
andreyevengineering.com	RU	2025-03-03T22:04:45.373982+00:00	`andreyevengineering.com`
oneill.com	US	2025-03-17T17:09:01.039220+00:00	`oneill.com`
familychc.com	US	2025-03-03T22:06:43.671034+00:00	`familychc.com`
www.solventacentroamerica.com	GT	2025-03-24T18:06:50.010060+00:00	`solventacentroamerica.com`
www.jhayber.com	ES	2025-03-17T17:07:14.599437+00:00	`jhayber.com`
conterra.com	DE	2025-03-26T16:28:51.508765+00:00	`conterra.com`
www.journeyoilfield.net	US	2025-02-28T20:35:03.365248+00:00	`journeyoilfield.net`
www.casinoessentials.com	US	2025-02-28T20:36:55.305277+00:00	`casinoessentials.com`
www.exemplar.com	IT	2025-03-24T20:46:52.458163+00:00	`exemplar.com`
www.accessfinanceonline.com	US	2025-03-21T18:59:09.170501+00:00	`accessfinanceonline.com`
www.dcarosolutions.com	CO	2025-03-08T23:27:46.612337+00:00	`dcaro.com.co`
lovesac.com	US	2025-03-06T16:33:34.775101+00:00	`lovesac.com`
www.nasonptc.com	US	2025-02-27T14:57:23.923174+00:00	`nasonptc.com`
teamwass.com	US	2025-02-27T14:58:40.801421+00:00	`teamwass.com`
www.obrienavocats.qc.ca	CA	2025-02-26T18:11:19.152349+00:00	`obrienavocats.qc.ca`
www.kppm.com	US	2025-02-26T22:38:50.142884+00:00	`kppm.com`
www.envirolabsinc.com	US	2025-02-26T22:40:23.188089+00:00	`envirolabsinc.com`
www.newburghhealthcarecenter.com	US	2025-02-26T19:32:22.744935+00:00	`newburghhealthcarecenter.com`
www.georgehay.co.uk	GB	2025-03-20T18:48:13.569186+00:00	`georgehay.co.uk`
hgmlegal.com	NZ	2025-02-25T18:03:54.078625+00:00	`hgmlegal.com`
www.wpisd.com	US	2025-02-25T18:09:06.148006+00:00	`wpisd.com`
www.avalon-hotel.com	US	2025-02-25T18:12:27.572225+00:00	`avalon-hotel.com`
www.hexosys.com	HK	2025-03-10T14:07:18.915815+00:00	`hexosys.com`
www.centersheetmetal.com	US	2025-03-06T16:38:49.750563+00:00	`centersheetmetal.com`
www.allstarhealthcaresolutions.com	US	2025-03-21T18:47:57.796177+00:00	`allstarhealthcaresolutions.com`
denbyco.co.uk	GB	2025-02-24T15:35:54.565376+00:00	`denbyco.co.uk`
www.famcomachine.com	US	2025-02-23T20:11:49.217234+00:00	`famcomachine.com`
www.amerasphalt.com	US	2025-02-26T18:07:56.340745+00:00	`amerasphalt.com`
compactmould.com	CA	2025-02-24T23:09:54.503416+00:00	`compactmould.com`
www.visualisation.one	DE	2025-03-12T10:26:44.956165+00:00	`visualisation.one`
www.electro-fusion.com	GB	2025-02-21T21:10:42.654753+00:00	`electro-fusion.com`
headcount.com	US	2025-02-21T15:08:09.362898+00:00	`headcount.com`
guadeloupeformation.com	FR	2025-02-21T15:10:02.056766+00:00	`guadeloupeformation.com`
www.fla-esq.com	US	2025-02-21T12:03:25.764908+00:00	`fla-esq.com`
goencon.com	US	2025-03-04T11:36:21.746929+00:00	`goencon.com`
www.okddsi.net	US	2025-02-20T20:02:26.580184+00:00	`okddsi.net`
www.black-star.fr	FR	2025-03-05T14:34:16.799657+00:00	`black-star.fr`
haleycomfort.com	US	2025-02-19T12:34:53.974637+00:00	`haleycomfort.com`
gilcar.co	CO	2025-02-20T20:04:02.923793+00:00	`gilcar.co`
ondaralogistica.com	ES	2025-02-23T17:13:34.749001+00:00	`ondaralogistica.com`
www.macmed.com	US	2025-02-18T17:01:30.567924+00:00	`macmed.com`
www.cda.be	BE	2025-03-05T11:34:21.187639+00:00	`cda.be`
www.confabca.com	CR	2025-02-25T18:05:40.290455+00:00	`confabca.com`
www.raymond.in	IN	2025-03-14T08:44:35.510531+00:00	`raymond.in`
www.s3s.com	US	2025-03-24T21:47:59.139190+00:00	`s3s.com`
eaglepost.com	US	2025-02-20T20:05:38.073779+00:00	`eaglepost.com`
www.macter.com	PK	2025-02-17T21:50:10.085055+00:00	`macter.com`
bisindustries.com	AU	2025-02-17T18:28:43.515453+00:00	`bisindustries.com`
lekiaviation.com	DK	2025-02-17T18:30:24.647732+00:00	`lekiaviation.com`
www.assisi.nl	NL	2025-03-29T21:26:21.414613+00:00	`assisi.nl`
www.ateliermonarque.com	CA	2025-02-25T18:07:22.489551+00:00	`ateliermonarque.com`
www.nola-law.com	US	2025-02-21T21:05:01.854162+00:00	`nola-law.com`
saulttribe.com/kewadin.com		2025-02-15T21:23:15.986816+00:00	`kewadin.com`
www.solardatasystems.com	US	2025-02-15T16:32:38.960781+00:00	`solardatasystems.com`
www.rowetactical.com	AU	2025-02-15T16:40:27.035621+00:00	`rowetactical.com`
www.japanrebuilt.jp	JP	2025-03-05T11:37:38.764440+00:00	`japanrebuilt.jp`
www.midwestvascular.net	US	2025-02-21T21:08:53.241490+00:00	`midwestvascular.net`
www.witheyaddison.com	CA	2025-02-21T21:06:53.381436+00:00	`witheyaddison.com`
dccsagroup.com&csahome.com	ID	2025-03-10T21:38:29.409758+00:00	`dccsagroup.com`
brockbanks.co.uk	GB	2025-02-14T10:54:00.111902+00:00	`brockbanks.co.uk`
snoqualmietribe.us	US	2025-02-13T14:35:22.282208+00:00	`snoqualmietribe.us`
enventuregt.com	US	2025-02-13T14:37:16.117401+00:00	`enventuregt.com`
alleghenybradford.com	US	2025-02-22T08:20:05.326374+00:00	`alleghenybradford.com`
www.emeryair.net	US	2025-02-26T18:06:01.090399+00:00	`emeryair.net`
www.elecgalapagos.com.ec	EC	2025-02-21T12:05:14.163615+00:00	`elecgalapagos.com.ec`
www.pransystems.com	US	2025-02-20T11:10:29.044660+00:00	`pransystems.com`
www.hinton.ca	CA	2025-03-06T19:05:25.976209+00:00	`hinton.ca`
twncomm.com	TW	2025-02-12T14:33:28.062349+00:00	`twncomm.com`
thejdkgroup.com	US	2025-02-12T14:35:02.531512+00:00	`thejdkgroup.com`
sundanceliving.com	US	2025-02-12T14:36:36.216434+00:00	`sundanceliving.com`
rogerspetro.com	CA	2025-02-12T14:38:09.402730+00:00	`rogerspetro.com`
minnesotaexteriors.com	US	2025-02-12T14:39:42.385795+00:00	`minnesotaexteriors.com`
laderalending.com	US	2025-02-12T14:41:17.793280+00:00	`laderalending.com`
krmcustomhomes.com	US	2025-02-12T14:42:52.410299+00:00	`krmcustomhomes.com`
ekvallbyrne.com	SE	2025-02-12T14:45:05.108637+00:00	`ekvallbyrne.com`
columbiacabinets.com	US	2025-02-12T14:46:42.625962+00:00	`columbiacabinets.com`
burdickpainting.com	US	2025-02-12T14:48:18.006269+00:00	`burdickpainting.com`
bergconst.com	US	2025-02-12T14:49:52.227970+00:00	`bergconst.com`
steveallcorn.remax.com	US	2025-02-12T14:51:28.047463+00:00	`steveallcorn.remax.com`
alderconstruction.com	US	2025-02-12T14:53:03.088038+00:00	`alderconstruction.com`
slchc.edu	US	2025-02-12T10:15:52.660279+00:00	`slchc.edu`
www.rgb.com	US	2025-02-25T18:10:51.307599+00:00	`rgb.com`
www.colacouronnelocations.com	HT	2025-02-15T16:29:15.285731+00:00	`colacouronnelocations.com`
primesourcestaffing.com	US	2025-02-11T00:54:31.494444+00:00	`primesourcestaffing.com`
kaplanstahler.com	US	2025-02-10T22:15:30.705657+00:00	`kaplanstahler.com`
sdfab.com	US	2025-02-10T22:17:09.851515+00:00	`sdfab.com`
bazcooil.com	US	2025-02-10T22:18:45.836215+00:00	`bazcooil.com`
komline.com	US	2025-02-10T22:20:22.531499+00:00	`komline.com`

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

📁 Case Management

Attach to case

Role

+ New case from this

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🏹 Add to case

Attach RansomHub (Actor / APT) and pull all linked entities: pull linked

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →

Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook