🏹 alphalocker — Ransomware
AlphaLocker is a low-cost ransomware operation built on the EDA2 open-source project that sells affiliates an admin panel, ransomware executable, and decryption key generator, lowering the barrier for entry-level cybercriminals using double-extortion tactics.
Classification
Ransomware
Leak-site victims
31
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (31)
| Victim | Country | Published | Domain |
|---|---|---|---|
| www.pyramisgroup.com | GR | 2026-02-28T17:28:14.514577+00:00 | www.pyramisgroup.com |
| www.bew.co.th | TH | 2025-11-16T00:39:34.967083+00:00 | www.bew.co.th |
| www.myriversidedentaloffice.com | US | 2025-11-03T19:36:05.942283+00:00 | www.myriversidedentaloffice.com |
| www.unterkofler.info | AT | 2025-11-03T01:41:25.996121+00:00 | www.unterkofler.info |
| www.automotiveml.com | US | 2025-11-03T01:40:46.526901+00:00 | www.automotiveml.com |
| www.verdugohillsdental.com | US | 2025-10-31T01:19:28.765035+00:00 | www.verdugohillsdental.com |
| www.mercantetubos.com.br | BR | 2025-10-13T19:48:39.336388+00:00 | www.mercantetubos.com.br |
| www.libertydentaltown.com | US | 2025-10-05T20:39:18.213202+00:00 | www.libertydentaltown.com |
| www.adhunikpower.com | IN | 2025-10-01T12:47:00.385015+00:00 | www.adhunikpower.com |
| www.sonoshowmoveis.com.br | BR | 2025-09-29T11:20:10.940180+00:00 | www.sonoshowmoveis.com.br |
| grupozeta.com & www.grupozetajalisco.com | MX | 2025-09-16T19:36:53.067569+00:00 | grupozeta.com |
| nubox.com & sumasaas.com | CL | 2025-09-08T15:10:19.108976+00:00 | nubox.com |
| ipathpr.com | US | 2025-09-08T10:57:41.700276+00:00 | ipathpr.com |
| gazomet.pl & cgas.pl | PL | 2025-09-08T10:57:23.719275+00:00 | gazomet.pl |
| www.arkworkplacerisk.co.uk | GB | 2024-08-09T21:58:22.255018+00:00 | arkworkplacerisk.co.uk |
| goftac.com/ firsttx.com First Texas Alliance Corp (FTAC) | US | 2024-08-08T15:55:28.287565+00:00 | goftac.com |
| www.carri.com | FR | 2024-08-06T22:14:50.222827+00:00 | carri.com |
| www.consorzioinnova.it | IT | 2024-08-06T22:14:24.304775+00:00 | consorzioinnova.it |
| goftac.com/ firsttx.com First Texas Alliance Corp (FTAC) | US | 2024-08-06T22:13:57.295983+00:00 | goftac.com |
| biw-burger.de | DE | 2024-08-06T22:08:17.031848+00:00 | biw-burger.de |
| https://goftac.com/ firsttx.com First Texas Alliance Corp (FTAC) | US | 2024-04-24T10:16:48.811819+00:00 | goftac.com |
| https://geodis.com | TH | 2024-04-18T09:43:08.990036+00:00 | geodis.com |
| https://www.consorzioinnova.it | IT | 2024-03-09T23:48:06.281659+00:00 | consorzioinnova.it |
| BM Catalysts bmcatalysts.co.uk | GB | 2024-02-14T14:53:11.629905+00:00 | bmcatalysts.co.uk |
| elandenergy.com Eland Energy | US | 2024-01-26T15:01:53.810037+00:00 | elandenergy.com |
| IntegrityInc.org Integrity Inc | US | 2024-01-24T14:45:44.391077+00:00 | integrityinc.org |
| https://www.carri.com | FR | 2024-01-24T14:45:06.666816+00:00 | carri.com |
| https://www.gadotbio.com/ Gadot Biochemical Industries Ltd | IS | 2024-01-24T14:44:34.860939+00:00 | gadotbio.com |
| accolade-group.com + levelwear.com +Taiwan microelectronics(CRM). | TW | 2024-01-24T14:44:06.749457+00:00 | levelwear.com |
| a24group.com ambition24hours.co.za | GB | 2024-01-24T14:43:39.162535+00:00 | a24group.com |
| https://www.mikeferry.com | US | 2024-01-24T14:43:03.761867+00:00 | mikeferry.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
🏹 Campaigns & malware
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron