🏹 alphv — Ransomware
The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language.<BR> <BR> Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil. (After several attacks against large companies, these groups faced pressure and arrests, necessitatin
Classification
Ransomware
Leak-site victims
731
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (731)
| Victim | Country | Published | Domain |
|---|---|---|---|
| Banco Sol | AO | 2023-07-26T15:59:41.889879+00:00 | bancosol.ao |
| PRESTIGE MAINTENANCE USA WAS HACKED | US | 2023-07-26T15:53:15.377849+00:00 | prestigeusa.net |
| Hometrust Mortgage Company | US | 2023-07-26T16:58:30.586243+00:00 | hometrust.com |
| Rob Levine & Associates Lawyers | US | 2023-07-26T15:33:02.545683+00:00 | roblevine.com |
| Insurance Agency Marketing Services | US | 2023-07-26T15:23:07.843530+00:00 | iamsinc.com |
| ipmaltamira | MX | 2024-03-03T16:14:30.091307+00:00 | ipmaltamira.com.mx |
| Ewig Usa | CN | 2024-03-03T02:51:16.231626+00:00 | ewig-mco.com |
| SBM & Co | GB | 2024-03-01T22:16:37.509891+00:00 | sbmaccountancy.co.uk/ |
| Petrus Resources Ltd | US | 2024-03-01T19:06:29.703908+00:00 | petrusresources.com |
| Kumagai Gumi Group | JP | 2024-03-01T11:42:48.642051+00:00 | kumagaigumi.co.jp |
| Allan Berger & Associates | US | 2024-02-29T20:41:38.513434+00:00 | bergerlawnola.com |
| Electro Marteix | ES | 2024-02-27T16:16:27.368735+00:00 | emtek.es |
| Angeles Medical Centers | US | 2024-02-26T19:18:22.259228+00:00 | angelesmentalhealth.com |
| S+C Partners | CA | 2024-02-26T16:16:41.334281+00:00 | scpllp.com |
| Worthen Industries [FULL DATA] | US | 2024-02-24T13:20:11.498849+00:00 | worthenind.com |
| Family Health center | US | 2024-02-23T22:19:23.575570+00:00 | fhckzoo.com |
| ANDFLA SRL | RO | 2024-02-23T10:11:07.670026+00:00 | andfla.ro/ |
| Hardeman County Community Health Center | US | 2024-02-22T11:37:31.233424+00:00 | hardemanhealth.org/ |
| Worthen Industries [We're giving you one last chance to save your business] | US | 2024-02-22T02:46:25.389381+00:00 | worthenind.com |
| verbraucherzentrale hessen | DE | 2024-02-27T23:51:06.836218+00:00 | verbraucherzentrale-hessen.de |
| KHSS (You have 3 days) | US | 2024-02-21T20:40:21.131455+00:00 | khss.com |
| Austen Consultants | US | 2024-02-21T14:49:56.075795+00:00 | Austein-it.com |
| Change Healthcare - Optum - UnitedHealth | US | 2024-02-28T17:52:40.226190+00:00 | changehealthcare.com |
| VSP Dental | US | 2024-02-18T03:03:48.918146+00:00 | vspdental.com |
| ASA Electronics [2.7 TB] | US | 2024-02-15T07:32:09.653035+00:00 | asaelectronics.com |
| HAL Allergy | ES | 2023-11-02T07:00:04.061687+00:00 | hal-allergy.com |
| Trans-Northern Pipelines | CA | 2024-02-13T13:10:20.009553+00:00 | tnpi.ca/ |
| ArcisGolf | US | 2024-02-13T13:11:01.041537+00:00 | arcisgolf.com |
| The Source | CA | 2024-02-13T13:11:40.112585+00:00 | thesource.ca/ |
| New Indy Containerboard | US | 2024-02-13T11:38:58.992108+00:00 | newindycontainerboard.com |
| Procopio | US | 2024-02-13T11:39:38.863571+00:00 | procopio.com |
| Herrs | US | 2024-02-13T11:40:19.671607+00:00 | herrs.com |
| Rush Energy Services Inc [Time's up] | CA | 2024-02-15T13:34:01.161294+00:00 | rushenergyservices.com |
| Rush Energy Services Inc [You have 48 hours] | CA | 2024-02-12T18:52:59.104091+00:00 | rushenergyservices.com |
| SERCIDE | ES | 2024-02-12T16:25:53.981857+00:00 | sercide.com |
| Lower Valley Energy, Inc | US | 2024-02-12T15:00:24.960619+00:00 | lvenergy.com |
| maddockhenson | US | 2024-02-10T11:37:46.475310+00:00 | maddockhenson.com |
| Jewish Home Lifecare | US | 2024-02-08T17:47:37.982031+00:00 | jewishhome.org |
| Vail-Summit Orthopaedics & Neurosurgery (VSON) | US | 2024-02-05T19:33:04.147169+00:00 | vsortho.com |
| Prudential Financial | US | 2024-02-16T22:32:20.882426+00:00 | prudential.com |
| Hydraflow | US | 2024-01-31T18:00:39.582319+00:00 | www.hydraflow.com |
| SportsMEDIA Technology | US | 2024-01-31T18:02:08.551896+00:00 | smt.com |
| TECHNICA - HACKED AND MORE THEN 300 GB DATA LEAKED! | IN | 2024-01-30T01:20:10.130064+00:00 | technicacorp.com |
| Dutton Brock | CA | 2024-01-29T14:52:13.911805+00:00 | duttonbrock.com |
| Draneas Huglin Dooley LLC | US | 2024-01-26T08:54:15.481061+00:00 | draneaslaw.com |
| Brightstar Care | US | 2024-01-24T22:23:44.409584+00:00 | brightstarcare.com |
| MBC Law Professional Corporation | CA | 2024-01-24T02:58:33.357347+00:00 | mbclaw.ca/ |
| Total Air Solutions | US | 2024-01-23T13:15:32.850598+00:00 | totalairfl.com |
| Herrs (You have 72 hours) | US | 2024-01-23T11:41:27.678372+00:00 | herrs.com |
| ANS COMPUTER [72hrs] | BE | 2024-01-22T13:30:25.258242+00:00 | anscomputer.be |
| Grace Lutheran Foundation | US | 2024-02-09T17:50:15.916790+00:00 | graceluthfound.com |
| Worthen Industries [You have three days] | US | 2024-01-20T11:50:17.713147+00:00 | worthenind.com |
| FULL LEAK! Busse & Busee, PC Attorneys at Law | US | 2024-01-23T23:54:19.744901+00:00 | bussepc.com |
| Busse & Busee, PC Attorneys at Law | US | 2024-01-19T17:57:29.258578+00:00 | bussepc.com |
| Builcore | US | 2024-01-12T19:12:41.242710+00:00 | builcore.com |
| R Robertson Insurance Brokers | US | 2024-01-11T10:09:06.665185+00:00 | rrib.com |
| automotionshade.com | CA | 2024-01-11T10:10:01.376117+00:00 | automotionshade.com |
| SHIBLEY RIGHTON | US | 2024-01-11T10:10:56.550228+00:00 | shibleyrighton.com |
| Ursel Phillips Fellows Hopkinson | CA | 2024-01-11T10:12:00.573117+00:00 | upfhlaw.ca |
| Triella | CA | 2024-01-11T10:13:01.820369+00:00 | triella.com |
| Group Bogart | FR | 2024-01-10T13:08:38.903995+00:00 | groupe-bogart.com |
| Erbilbil Bilgisayar | TR | 2024-01-08T23:43:26.351195+00:00 | erbilbilgisayar.com |
| LoanDepot | US | 2024-02-16T22:30:13.976966+00:00 | loandepot.com |
| SAED International | SA | 2024-01-02T16:01:47.316512+00:00 | saed.sa/ |
| Clearwinds | 2023-12-30T10:04:10.856519+00:00 | clearwinds.net/ | |
| Erbilbil Bilgisayar (You have 72 hours) | 2023-12-29T20:38:15.935180+00:00 | erbilbilgisayar.com | |
| Nej Inc was hacked | US | 2023-12-29T08:36:57.416148+00:00 | — |
| Wesgar Inc | CA | 2023-12-28T14:38:43.339689+00:00 | wesgar.com |
| FIRST 5 Santa Clara County | US | 2023-12-27T12:40:40.497784+00:00 | first5kids.org/ |
| Aura Engineering, LLC | US | 2023-12-27T12:41:11.029582+00:00 | aura-engineering.com |
| Ultra Intelligence & Communications | GB | 2023-12-27T12:41:41.623899+00:00 | ultra-ic.com |
| Prefeitura Municipal de Itabira | BR | 2023-12-24T08:29:07.837179+00:00 | itabira.mg.gov.br/ |
| PriceSmart (Update) | US | 2023-12-23T01:19:47.116688+00:00 | pricesmart.com |
| VF Corporation | 2023-12-22T22:19:54.099422+00:00 | vfc.com | |
| Navigation Financial Group | 2023-12-20T14:35:03.865273+00:00 | navigationfinancial.com | |
| Viking Therapeutics | 2023-12-19T20:28:45.888325+00:00 | vikingtherapeutics.com | |
| Viking Therapeutics reported to the SEC following a breach | 2023-12-18T19:06:26.869447+00:00 | vikingtherapeutics.com | |
| E & J Gallo Winery | US | 2023-12-16T23:32:01.166424+00:00 | ejgallo.com |
| Advantage Group International | 2023-12-13T17:28:07.816346+00:00 | advantagegroup.com | |
| LeClair Group | US | 2024-01-31T18:01:27.805629+00:00 | leclairgroup.com |
| TraCS Florida FSU | 2023-12-05T20:41:23.255411+00:00 | tracsflorida.org | |
| Henry Schein Inc - Henry's " LOST SHINE " | US | 2023-12-05T20:41:54.891464+00:00 | HTTPS://HENRYSCHEIN.COM |
| CLATSKANIEPUD | 2023-12-05T10:10:42.775571+00:00 | clatskaniepud.com | |
| Tipalti | 2023-12-04T19:08:39.872720+00:00 | tipalti.com | |
| Evnhcmc | VN | 2023-12-04T10:10:26.667981+00:00 | evnhcmc.vn/ |
| Tipalti claimed as a victim - but we'll extort Roblox and Twitch, two of their affected cl | 2023-12-03T04:11:26.061646+00:00 | roblox.com
twitch.tv | |
| Tipalti claimed as a victim - but we'll extort Roblox, one of their affected clients, indi | 2023-12-03T02:39:58.647461+00:00 | roblox.com | |
| Lisa Mayer CA, Professional Corporation | CA | 2023-12-02T22:11:17.217652+00:00 | cpasarnia.ca |
| royaleinternational.com | 2023-12-02T11:28:44.582358+00:00 | royaleinternational.com | |
| IRC Engineering | BE | 2023-12-02T08:26:34.186735+00:00 | irc.be |
| Dörr Group | DE | 2023-12-02T08:27:09.348840+00:00 | doerrgroup.com |
| AQIPA | 2023-11-29T17:29:43.486670+00:00 | aqipa.com | |
| HTC Global Services | 2023-11-30T23:33:47.488433+00:00 | htcinc.com | |
| Fischione Instruments Inc | 2023-11-27T17:40:32.752524+00:00 | fischione.com | |
| Vertex Resource Group | CA | 2023-11-27T17:41:19.570112+00:00 | vertex.ca |
| sillslegal | GB | 2023-11-27T07:04:45.558767+00:00 | sillslegal.co.uk/ |
| Hampton Newport News CSB (Last chance) | 2023-11-24T23:44:32.847733+00:00 | hnncsb.org/ | |
| LCA Consultores | BR | 2023-11-24T13:01:35.339154+00:00 | lcaconsultores.com.br/ |
| Spectrum Solutions LLC | 2023-11-24T09:59:43.952711+00:00 | spectrumsolution.com | |
| TJM PRODUCTS PTY. LTD | AU | 2023-11-24T10:00:21.004145+00:00 | tjm.com.au/ |
| Eckell Sparks Law Firm | 2023-11-23T11:37:35.914591+00:00 | eckellsparks.com | |
| NESPOLI GROUP | DE | 2023-11-22T14:39:35.680862+00:00 | nespoligroup.de |
| [DATA] Bakrie Group & Bakrie Sumatera Plantations | ID | 2023-11-21T23:37:18.899025+00:00 | bakriesumatera.com |
| Hampton Newport News CSB | 2023-11-20T21:59:51.808370+00:00 | hnncsb.org/ | |
| China Petrochemical Development | TW | 2023-11-28T19:14:03.529343+00:00 | cpdc.com.tw |
| U.L. COLEMAN COMPANIES | 2023-11-19T20:27:23.609141+00:00 | ulcoleman.com | |
| Tackle West | AU | 2023-11-19T20:27:55.405855+00:00 | tacklewest.com.au/ |
| Autonomous Flight - @autonomousfly | US | 2023-11-19T07:02:29.368099+00:00 | autonomousflight.us/ |
| Fidelity National Financial | US | 2023-11-22T23:44:31.748114+00:00 | fnf.com |
| UPDATE! FEAM Maintenance | US | 2023-11-20T14:26:32.575657+00:00 | feam.aero |
| FEAM Maintenance | US | 2023-11-16T13:01:20.719729+00:00 | feam.aero |
| MeridianLink fails to file with the SEC..so we do it for them + 24 hours to pay | 2023-11-15T21:56:42.218716+00:00 | — | |
| ADH Health Products Inc | 2023-11-15T12:53:24.378804+00:00 | adhhealth.com | |
| Cardinal MetalWorks | 2023-11-15T12:54:06.021646+00:00 | cardinalmetalworks.com | |
| MeridianLink | 2023-11-15T00:57:46.202662+00:00 | meridianlink.com | |
| Premise Health | 2023-11-15T00:58:19.675123+00:00 | premisehealth.com | |
| Gnome Landscapes | 2023-11-14T18:57:10.114064+00:00 | gnomelandscapes.com | |
| SheelaFoam | 2023-11-14T15:55:46.533359+00:00 | sheelafoam.com | |
| 4set.es | ES | 2023-11-14T14:29:05.316768+00:00 | 4set.es |
| Naftor and Grupa Pern (Naftoport/ SIARKOPOL/ SARMATIA/ NAFTOSERWIS) is the most dangerous | PL | 2023-11-14T14:29:33.312341+00:00 | naftor.pl |
| Execuzen | 2023-11-14T09:55:03.890725+00:00 | htttps://execuzen.com | |
| ASM GLOBAL | 2023-11-13T20:26:11.926471+00:00 | asmglobal.com | |
| St. Lucie County Tax Collector’s | 2023-11-13T18:57:02.690886+00:00 | tcslc.com | |
| Pricesmart | 2023-11-12T08:23:17.625846+00:00 | pricesmart.com | |
| Deutsche Energie-Agentur | DE | 2023-12-06T14:42:36.878776+00:00 | dena.de/ |
| Okada Manilla | PH | 2023-12-29T20:38:49.045491+00:00 | okadamanila.com |
| Mariposa Landscapes, Inc | 2023-11-10T16:05:17.474821+00:00 | mariposa-ca.com | |
| Sinotech Group Taiwan | VN | 2023-11-09T21:58:49.484771+00:00 | sinotech.org.tw/ |
| sheehyware.com | 2023-11-08T16:00:13.040419+00:00 | sheehyware.com | |
| Bakrie Group & Bakrie Sumatera Plantations | ID | 2023-11-07T23:27:04.443077+00:00 | bakriesumatera.com |
| Certified Mortgage Planners | 2023-11-07T16:01:55.281455+00:00 | cmpfl.com/ | |
| Japan Aviation Electronics Industry, Ltd | JP | 2023-11-07T00:57:37.363884+00:00 | jae.com |
| Comfloresta | BR | 2023-11-06T02:30:02.224186+00:00 | comfloresta.com.br/ |
| Currax Pharmaceuticals | 2023-11-06T00:58:05.266345+00:00 | curraxpharma.com | |
| penanshin | 2023-11-05T19:05:53.295276+00:00 | penanshin.com | |
| Contact Cottrell and McCullough | 2023-11-02T14:30:40.291200+00:00 | cottrelldental.com | |
| AF Supply | 2023-11-02T11:26:49.188752+00:00 | afsupply.com | |
| Town of Lowa | 2023-11-01T11:28:29.854896+00:00 | iowala.org/ | |
| WACOSA | 2023-10-29T17:36:44.136494+00:00 | wacosa.org/ | |
| Morrison Community Hospital FULL HUGE LEAK + BONUS | 2023-10-28T13:42:55.362244+00:00 | morrisonhospital.com | |
| ISRAEL STOP GENOCIDE IN GAZA | 2023-10-28T06:02:29.857561+00:00 | — | |
| Mutual Underwriters | 2023-10-27T13:20:18.581203+00:00 | mutualunderwriters.net/ | |
| CBS | RO | 2023-10-27T04:38:07.881866+00:00 | cbs-ee.ro/ |
| Corsica-Ferries | IT | 2023-11-05T20:36:11.031226+00:00 | corsica-ferries.fr |
| LBA | 2023-10-25T10:19:08.716806+00:00 | lbaproperties.com | |
| thewalkerschool | 2023-11-16T11:31:00.540798+00:00 | thewalkerschool.org | |
| Advarra leak | 2023-11-05T21:58:05.602180+00:00 | advarra.com | |
| Warning to Advarra & Gadi! | 2023-11-03T00:56:42.464580+00:00 | advarra.com | |
| Advarra Inc | 2023-11-01T20:40:03.200430+00:00 | advarra.com | |
| Advarra Inc.(PFIZER,GILEAD ETC AFFECTED) | 2023-11-01T00:55:42.069342+00:00 | advarra.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
🏹 Campaigns & malware
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron