🏹 abyss — Ransomware
Abyss (also known as Abyss Locker) is a ransomware operation first identified in March 2023, derived from the Babuk source code, that targets Windows and Linux/VMware ESXi systems using double-extortion tactics across healthcare, manufacturing, finance, and technology sectors — predominantly in North America.
Classification
Ransomware
Leak-site victims
90
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (90)
| Victim | Country | Published | Domain |
|---|---|---|---|
| School Facility Consultants | 2026-06-01T14:50:15.839533+00:00 | — | |
| landkreis-limburg-weilburg.de | DE | 2026-06-01T07:51:28.639553+00:00 | landkreis-limburg-weilburg.de |
| technic.com | US | 2026-05-14T11:20:27.870660+00:00 | technic.com |
| thinlinetech.com | US | 2026-02-26T13:07:05.883295+00:00 | thinlinetech.com |
| sitoy.com | HK | 2026-01-26T15:57:11.373427+00:00 | sitoy.com |
| dillonyarn.com | US | 2025-12-10T10:17:58.895010+00:00 | dillonyarn.com |
| optimumdesign.com | US | 2025-09-22T09:09:35.828084+00:00 | optimumdesign.com |
| moinian.com | US | 2025-09-11T09:48:33.227503+00:00 | moinian.com |
| hptc.org | US | 2025-07-26T07:47:02.895419+00:00 | hptc.org |
| brett-robinson.com | 2023-05-08T14:51:13.635217+00:00 | brett-robinson.com | |
| crownlaboratories.com | US | 2025-04-02T09:10:40.324639+00:00 | crownlaboratories.com |
| entandallergy.com | US | 2025-03-28T10:15:44.535498+00:00 | entandallergy.com |
| mdm-insurance.com | GB | 2025-03-14T09:14:38.773857+00:00 | mdm-insurance.com |
| ceratec.com | CA | 2025-03-03T09:40:28.552981+00:00 | ceratec.com |
| halex.com | US | 2025-02-15T08:04:58.561369+00:00 | halex.com |
| Four Eye Clinics | US | 2025-02-02T12:49:05.470233+00:00 | — |
| jpcgroupinc.com | US | 2025-02-02T12:49:00.761874+00:00 | jpcgroupinc.com |
| envirosep.com | US | 2025-01-25T08:49:43.937356+00:00 | envirosep.com |
| kingpower.com | HK | 2025-01-08T21:14:34.758156+00:00 | hkkingpowergroup.com |
| bataviacontainer.com | NL | 2024-12-19T07:38:14.910401+00:00 | bataviacontainer.com |
| pez.com | AT | 2024-12-06T06:46:10.800094+00:00 | pez.com |
| berkotfoods.com | US | 2024-12-21T19:09:47.744706+00:00 | berkotfoods.com |
| glts.net | US | 2024-11-25T20:03:45.767079+00:00 | glts.net |
| anhf.org.auh | AU | 2024-10-29T17:18:26.956385+00:00 | anhf.org.auh |
| projektalp.ch | CH | 2024-10-29T15:37:57.690938+00:00 | projektalp.ch |
| In the depths of software development. | US | 2024-10-15T16:32:25.493185+00:00 | — |
| Promise Technology, Inc. | US | 2024-10-15T16:32:17.938565+00:00 | promise.com |
| promise.com | US | 2024-10-11T16:03:27.622845+00:00 | promise.com |
| victrongroup.com | VN | 2024-10-09T10:03:14.962584+00:00 | victrongroup.com |
| tolsa.com | ES | 2024-09-26T09:35:10.048692+00:00 | tolsa.com |
| tims.com | CA | 2024-09-19T09:04:52.940818+00:00 | tims.com |
| ecbawm.com | JP | 2024-09-14T05:59:36.509395+00:00 | ecbawm.com |
| f-t.com | US | 2024-09-23T19:05:20.262352+00:00 | f-t.com |
| pfsbrands.com | US | 2024-08-30T20:05:32.763726+00:00 | pfsbrands.com |
| comtruck.ca | CA | 2024-08-28T12:41:37.674874+00:00 | comtruck.ca |
| idahopacific.com | US | 2024-08-23T17:06:53.196189+00:00 | idahopacific.com |
| spvmhc.org | US | 2024-08-21T11:54:23.900897+00:00 | spvmhc.org |
| robertshvac.com | US | 2024-08-11T09:12:50.028466+00:00 | robertshvac.com |
| zoppo.com | US | 2024-07-28T10:39:55.825985+00:00 | zoppo.com |
| greenlightbiosciences.com | 2024-07-15T11:59:38.119534+00:00 | greenlightbiosciences.com | |
| q-cells.de | DE | 2024-08-02T13:46:25.432742+00:00 | q-cells.de |
| crimsonwinegroup.com | US | 2024-07-25T07:19:59.104958+00:00 | crimsonwinegroup.com |
| landmarklife.com | US | 2024-06-27T16:01:29.164368+00:00 | landmarklife.com |
| tpocc.org | US | 2024-06-25T08:21:52.553563+00:00 | tpocc.org |
| conferenceusa.com | US | 2024-06-27T16:01:26.140969+00:00 | conferenceusa.com |
| malca-amit.com | IL | 2024-06-18T11:41:48.718690+00:00 | malca-amit.com |
| woldae.com | US | 2024-05-07T18:26:56.128339+00:00 | woldae.com |
| rangam.com | US | 2024-04-23T18:16:49.380263+00:00 | rangam.com |
| rameywine.com | US | 2024-03-29T10:22:07.584978+00:00 | rameywine.com |
| lindquistinsurance.com | US | 2024-03-27T11:53:22.506624+00:00 | lindquistinsurance.com |
| iamdesign.com | IT | 2024-03-14T11:54:00.547840+00:00 | iamdesign.com |
| yarco.com | US | 2024-03-14T08:48:47.558176+00:00 | yarco.com |
| neigc.com | US | 2024-03-11T11:47:42.879274+00:00 | neigc.com |
| sunharbormanor.com | US | 2024-02-29T10:12:40.743629+00:00 | sunharbormanor.com |
| vanwingerden.com | US | 2024-02-14T11:53:02.339499+00:00 | vanwingerden.com |
| mranet.org | US | 2024-02-10T17:42:32.489411+00:00 | mranet.org |
| posen.com | US | 2024-02-09T11:37:41.442231+00:00 | posen.com |
| transaxle.com | US | 2024-02-07T11:57:20.992803+00:00 | transaxle.com |
| deltron.com | US | 2024-02-06T20:46:27.665694+00:00 | deltron.com |
| vidalung.ai | US | 2024-01-27T10:24:04.140388+00:00 | vidalung.ai |
| synergyfinancialgrp.com | US | 2024-01-23T23:53:08.051178+00:00 | synergyfinancialgrp.com |
| micrometals.com | US | 2024-01-23T23:53:06.234948+00:00 | micrometals.com |
| concertus.co.uk | GB | 2023-12-05T07:11:18.753746+00:00 | concertus.co.uk |
| aurobindousa.com | 2023-11-30T10:30:23.816025+00:00 | aurobindousa.com | |
| shawneemilling.com | 2023-11-11T12:54:35.771391+00:00 | shawneemilling.com | |
| motordepot.co.uk | GB | 2023-11-11T09:53:50.014786+00:00 | motordepot.co.uk |
| lathamcenters.org | 2023-11-05T19:05:34.054940+00:00 | lathamcenters.org | |
| apexga.bank | 2023-10-26T10:38:20.946598+00:00 | apexga.bank | |
| njsba.com | 2023-09-10T09:59:22.241943+00:00 | njsba.com | |
| www.northriverco.com | 2023-09-08T23:35:38.040338+00:00 | northriverco.com | |
| www.lasaterandmartin.com | 2023-08-31T16:05:33.784108+00:00 | lasaterandmartin.com | |
| www.finitia.net | 2023-08-09T08:57:31.431801+00:00 | finitia.net | |
| plbint.com | 2023-07-21T05:56:01.267403+00:00 | plbint.com | |
| www.brockhouse.co.uk | GB | 2023-07-18T09:55:06.374405+00:00 | brockhouse.co.uk |
| www.tractrad.com | 2023-07-17T15:52:07.567662+00:00 | tractrad.com | |
| www.stri.se | SE | 2023-07-16T17:53:20.500318+00:00 | stri.se |
| www.arb.ch | CH | 2023-07-16T10:19:27.000962+00:00 | arb.ch |
| www.l3harris.com | 2023-05-15T19:50:01.223583+00:00 | www.l3harris.com | |
| wsots.net | 2023-05-15T18:49:40.354679+00:00 | wsots.net | |
| pwlawfirm.com | 2023-05-12T06:47:35.033815+00:00 | pwlawfirm.com | |
| avidxchange.com | 2023-05-08T14:51:12.882568+00:00 | avidxchange.com | |
| pandol.com | 2023-04-18T08:47:25.719188+00:00 | pandol.com | |
| 7x7oralsurgery.com | 2023-03-30T07:12:54.041671+00:00 | 7x7oralsurgery.com | |
| largest provider of orthopedic care | 2023-03-22T07:07:07.672656+00:00 | — | |
| hosemanufacturing.com | 2023-03-21T09:55:39.448439+00:00 | hosemanufacturing.com | |
| igadiltd.com | 2023-03-21T09:55:39.355837+00:00 | igadiltd.com | |
| jones-hamilton.com | 2023-03-21T09:55:39.257647+00:00 | jones-hamilton.com | |
| stonehillcontracting.com | 2023-03-21T09:55:39.159970+00:00 | stonehillcontracting.com | |
| siebold.com | 2023-03-21T09:55:39.059571+00:00 | siebold.com | |
| bienvilleortho.com | 2023-03-27T09:09:59.118655+00:00 | bienvilleortho.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron