🏹 apt73 — Ransomware
A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field.<br> <br> According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit.<BR>Source: https://github.com/crocodyli/ThreatActors-TTPs
Classification
Ransomware
Leak-site victims
157
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (157)
| Victim | Country | Published | Domain |
|---|---|---|---|
| metrabyte.cloud | DE | 2026-07-24T09:52:11.192712+00:00 | metrabyte.cloud |
| dgcement.com | DZ | 2026-07-06T13:21:22.272850+00:00 | dgcement.com |
| azarestan.com | IR | 2026-07-06T12:51:56.956264+00:00 | azarestan.com |
| vicentetrapani.com | AR | 2026-07-06T10:51:46.101374+00:00 | vicentetrapani.com |
| westernint.com | US | 2026-07-06T08:50:59.369879+00:00 | westernint.com |
| aydeniz.com | TR | 2026-07-03T12:22:02.886675+00:00 | aydeniz.com |
| flazio.com | BR | 2026-07-02T16:21:57.139761+00:00 | flazio.com |
| holidaypalace.com | MO | 2026-07-02T16:21:09.682878+00:00 | holidaypalace.com |
| ritavo.com | AT | 2026-07-02T15:52:08.127189+00:00 | ritavo.com |
| kliknklik.com | ID | 2026-06-23T13:20:43.862544+00:00 | kliknklik.com |
| viennaairport.com | AT | 2026-06-23T10:50:47.891497+00:00 | viennaairport.com |
| smarty.arpinet.am | AM | 2026-06-03T11:20:38.080644+00:00 | smarty.arpinet.am |
| elections.mia.gov.am from WOLVES OF TURAN | AM | 2026-06-02T12:50:40.044776+00:00 | — |
| tkgm.gov.tr | TR | 2026-05-22T14:50:39.992561+00:00 | tkgm.gov.tr |
| minsa.com.mx | MX | 2026-05-22T14:20:40.658584+00:00 | minsa.com.mx |
| tvnmedia.com | PL | 2026-05-22T09:50:34.524704+00:00 | tvnmedia.com |
| grupopetersen.com.ar | AR | 2026-05-21T16:22:34.651196+00:00 | grupopetersen.com.ar |
| narit.or.th | TH | 2026-05-21T15:53:01.625984+00:00 | narit.or.th |
| alkaloid.com.mk | MK | 2026-05-21T15:22:37.344545+00:00 | alkaloid.com.mk |
| trifecta.com | US | 2026-04-27T16:56:57.934853+00:00 | trifecta.com |
| credio.eu | AT | 2026-04-27T16:56:39.690490+00:00 | credio.eu |
| servicepower.com | GB | 2026-04-27T16:56:19.669786+00:00 | servicepower.com |
| bigalsfoodservice.co.uk | GB | 2026-04-27T16:56:00.704298+00:00 | bigalsfoodservice.co.uk |
| pindrophearing.co.uk | GB | 2026-04-27T16:55:22.627070+00:00 | pindrophearing.co.uk |
| talonsolutions.co.uk | GB | 2026-04-27T16:55:02.973673+00:00 | talonsolutions.co.uk |
| scopeset.de | DE | 2026-04-27T16:54:05.400995+00:00 | scopeset.de |
| trinitesolutions.com | US | 2026-04-27T16:53:45.074341+00:00 | trinitesolutions.com |
| baldinger-ag.ch | CH | 2026-04-27T16:53:05.567205+00:00 | baldinger-ag.ch |
| lamaisonducitron.com | FR | 2026-04-27T16:52:43.143532+00:00 | lamaisonducitron.com |
| protectasecurity.pe | PE | 2026-04-27T16:52:21.870861+00:00 | protectasecurity.pe |
| netromsoftware.ro | RO | 2026-04-27T16:52:01.786584+00:00 | netromsoftware.ro |
| sella.eng.br | BR | 2026-04-27T16:51:44.701460+00:00 | sella.eng.br |
| polleninformation.at | AT | 2026-04-27T16:51:25.977649+00:00 | polleninformation.at |
| sansirostadium.com | IR | 2026-04-27T16:51:04.731428+00:00 | sansirostadium.com |
| siapenet.gov.br | BR | 2026-04-27T16:50:47.355449+00:00 | siapenet.gov.br |
| certifiedinfosec.com | US | 2026-04-27T16:50:28.941720+00:00 | certifiedinfosec.com |
| aliorbank.pl | PL | 2026-04-27T16:50:08.501079+00:00 | aliorbank.pl |
| minerasancristobal.com | MX | 2026-04-27T16:49:29.835268+00:00 | minerasancristobal.com |
| prixet.com | 2026-04-27T16:49:08.345741+00:00 | prixet.com | |
| hl.co.uk | GB | 2026-04-27T16:48:27.506986+00:00 | hl.co.uk |
| compensatii.gov.md | MD | 2026-04-27T16:48:06.608231+00:00 | compensatii.gov.md |
| mahidol.ac.th | TH | 2026-04-27T16:47:44.531655+00:00 | mahidol.ac.th |
| corahperu.org | PE | 2026-04-27T16:47:20.684403+00:00 | corahperu.org |
| amtaar.com | AE | 2026-04-27T16:47:00.130827+00:00 | amtaar.com |
| banak.com | TR | 2026-04-27T16:46:38.893937+00:00 | banak.com |
| bankasia-bd.com | BD | 2026-04-27T16:46:12.553511+00:00 | bankasia-bd.com |
| bg.ac.rs | RS | 2026-04-27T16:45:51.884636+00:00 | bg.ac.rs |
| novoair-bd.com | BD | 2026-04-27T16:45:31.212096+00:00 | novoair-bd.com |
| seit.cl | CL | 2026-04-27T16:45:11.442438+00:00 | seit.cl |
| gedco.ps | PS | 2026-04-27T16:44:52.966729+00:00 | gedco.ps |
| haca.ma | MA | 2026-04-27T16:44:32.030160+00:00 | haca.ma |
| shj.ae | AE | 2026-04-27T16:44:09.469181+00:00 | shj.ae |
| moccae.gov.ae | AE | 2026-04-27T16:43:51.751709+00:00 | moccae.gov.ae |
| vanheyghenstaal.be | BE | 2026-04-27T16:43:27.975141+00:00 | vanheyghenstaal.be |
| isosl.be | BE | 2026-04-27T16:43:06.963107+00:00 | isosl.be |
| doghairinc.com | US | 2026-04-27T16:42:49.919933+00:00 | doghairinc.com |
| dpwh.gov.ph | PH | 2026-04-27T16:42:32.889095+00:00 | dpwh.gov.ph |
| iam.ma | MA | 2026-04-27T16:42:15.940237+00:00 | iam.ma |
| ires.ma | MA | 2026-04-27T16:41:59.930434+00:00 | ires.ma |
| 2m.ma | MA | 2026-04-27T16:41:42.437381+00:00 | 2m.ma |
| centrum.sk | SK | 2026-04-27T16:41:26.169669+00:00 | centrum.sk |
| asunim.co | CO | 2026-04-27T16:41:09.841645+00:00 | asunim.co |
| egov.sc | SC | 2026-04-27T16:40:53.311030+00:00 | egov.sc |
| phb.com | DE | 2026-04-27T16:40:36.402660+00:00 | phb.com |
| whessoe.com.my | MY | 2026-04-27T16:40:18.157740+00:00 | whessoe.com.my |
| olpro.com.my | MY | 2026-04-27T16:40:01.223777+00:00 | olpro.com.my |
| ifmis.go.ke | KE | 2026-04-27T16:39:44.786475+00:00 | ifmis.go.ke |
| algosaibi-gtb.com | SA | 2026-04-27T16:39:28.056119+00:00 | algosaibi-gtb.com |
| alx-pc.com | DE | 2026-04-27T16:39:11.365973+00:00 | alx-pc.com |
| arrawdah.org.sa | SA | 2026-04-27T16:38:54.442165+00:00 | arrawdah.org.sa |
| cofaco.com | CO | 2026-04-27T16:38:38.163960+00:00 | cofaco.com |
| dunav.com | RS | 2026-04-27T16:38:22.492223+00:00 | dunav.com |
| grupo-principal.com | MX | 2026-04-27T16:37:28.109633+00:00 | grupo-principal.com |
| jgpetrucci.com | US | 2026-04-27T16:37:11.845832+00:00 | jgpetrucci.com |
| medikaplaza.com | PK | 2026-04-27T16:36:54.666435+00:00 | medikaplaza.com |
| providentgh.com | GH | 2026-04-27T16:36:37.386543+00:00 | providentgh.com |
| tni.mil.id | ID | 2025-02-25T16:14:24.293874+00:00 | tni.mil.id |
| bms.com | US | 2026-04-27T16:49:47.511827+00:00 | bms.com |
| www.bms.com | US | 2024-12-09T15:08:50.311037+00:00 | bms.com |
| autogedal.ro | RO | 2025-02-18T17:48:01.875373+00:00 | autogedal.ro |
| boostheat.com | FR | 2025-02-05T15:32:43.080050+00:00 | boostheat.com |
| mistralsolutions.com | IN | 2025-02-04T14:56:30.414937+00:00 | mistralsolutions.com |
| India car owners | IN | 2025-02-04T14:54:58.558242+00:00 | — |
| coel.com.mx | MX | 2025-02-03T11:18:50.792621+00:00 | coel.com.mx |
| ome.tv | TR | 2025-01-30T12:55:10.076761+00:00 | ome.tv |
| icicibank.com | IN | 2025-01-21T16:26:02.897523+00:00 | icicibank.com |
| malindoair.com | MY | 2025-01-20T17:41:58.153823+00:00 | malindoair.com |
| fol-23.fr | FR | 2025-01-17T16:19:22.447620+00:00 | fol-23.fr |
| realtaxcanada.com | CA | 2025-02-03T09:59:33.224089+00:00 | realtaxcanada.com |
| pnp.co.za | ZA | 2025-01-09T16:38:42.188654+00:00 | pnp.co.za |
| federalbank.co.in (PART1) | IN | 2024-12-24T12:09:13.653629+00:00 | — |
| n4telecom.com.br | BR | 2024-12-23T17:41:21.881478+00:00 | n4telecom.com.br |
| linebank.co.id | ID | 2024-12-23T17:38:15.891915+00:00 | linebank.co.id |
| federalbank.co.in | IN | 2024-12-20T04:09:16.162751+00:00 | federalbank.co.in |
| bri.co.id | ID | 2024-12-18T11:57:00.765385+00:00 | bri.co.id |
| www.prixet.com | ES | 2024-12-16T17:15:28.957719+00:00 | prixet.com |
| www.minerasancristobal.com | BO | 2024-12-11T16:38:23.236459+00:00 | minerasancristobal.com |
| leadboxhq.com | US | 2024-12-10T16:12:48.615746+00:00 | leadboxhq.com |
| melhorcompraclube.com.br | BR | 2024-12-09T16:50:14.804702+00:00 | melhorcompraclube.com.br |
| bankily.mr | MR | 2024-12-09T15:05:37.571850+00:00 | bankily.mr |
| azpay.me | AZ | 2024-12-05T18:16:50.206462+00:00 | azpay.me |
| www.aliorbank.pl | PL | 2024-12-05T11:48:49.175724+00:00 | aliorbank.pl |
| www.certifiedinfosec.com | US | 2024-12-04T12:45:37.584621+00:00 | certifiedinfosec.com |
| www.siapenet.gov.br | BR | 2024-12-03T18:15:40.828252+00:00 | siapenet.gov.br |
| www.sansirostadium.com | IT | 2024-11-30T11:57:06.079893+00:00 | sansirostadium.com |
| www.polleninformation.at | AT | 2024-11-27T20:41:40.482339+00:00 | polleninformation.at |
| www.sella.eng.br | BR | 2024-11-26T18:04:55.371995+00:00 | sella.eng.br |
| www.netromsoftware.ro | RO | 2024-11-25T16:35:49.324311+00:00 | netromsoftware.ro |
| gureco.pl | PL | 2024-11-23T16:43:42.485455+00:00 | gureco.pl |
| lgpunjab.gov.in | IN | 2024-11-23T16:40:43.165653+00:00 | lgpunjab.gov.in |
| rao.hr | AT | 2024-11-23T16:49:39.850547+00:00 | rao.hr |
| www.protectasecurity.pe | PE | 2024-11-23T16:52:39.382557+00:00 | protectasecurity.pe |
| nanolive.ch 2.0 | CH | 2024-11-13T11:40:35.365746+00:00 | — |
| emefarmario.com.br | BR | 2024-11-09T12:10:26.263248+00:00 | emefarmario.com.br |
| liftkits4less.com | US | 2024-11-08T16:18:25.398017+00:00 | liftkits4less.com |
| www.lamaisonducitron.com | FR | 2024-11-08T16:15:27.788671+00:00 | lamaisonducitron.com |
| www.baldinger-ag.ch | CH | 2024-11-08T16:12:28.485732+00:00 | baldinger-ag.ch |
| www.botiga.com.uy | UY | 2024-11-08T10:05:58.676552+00:00 | botiga.com.uy |
| www.trinitesolutions.com | NL | 2024-10-29T15:49:16.385575+00:00 | trinitesolutions.com |
| www.scopeset.de | DE | 2024-10-29T15:46:16.341821+00:00 | scopeset.de |
| sokkakreatif.com | ID | 2024-10-29T15:43:17.966250+00:00 | sokkakreatif.com |
| pkaufmann.com | US | 2024-10-24T15:32:43.627604+00:00 | pkaufmann.com |
| modplan.co.uk | GB | 2024-10-24T15:31:44.717175+00:00 | modplan.co.uk |
| hpecds.com | US | 2024-10-24T15:30:45.503078+00:00 | hpecds.com |
| thompsoncreek.com | CA | 2024-10-24T14:03:42.289945+00:00 | thompsoncreek.com |
| www.northernsafety.com | US | 2024-10-24T14:02:43.703928+00:00 | northernsafety.com |
| mgfsourcing.com | US | 2024-10-24T14:01:45.391823+00:00 | mgfsourcing.com |
| thebeautyclick.co.uk | GB | 2024-10-24T13:48:44.476885+00:00 | thebeautyclick.co.uk |
| trans-logik.com | GB | 2024-10-24T13:45:45.889787+00:00 | trans-logik.com |
| www.talonsolutions.co.uk | GB | 2024-10-24T13:42:43.093946+00:00 | talonsolutions.co.uk |
| Sandro Forte Financial Support | GB | 2024-10-24T12:24:42.687153+00:00 | forte-financial.co.uk |
| Susan Fischgrund | US | 2024-10-24T12:23:49.108183+00:00 | — |
| nanolive.ch | CH | 2024-10-24T12:22:50.425277+00:00 | nanolive.ch |
| appen.com | AU | 2024-10-24T14:00:47.123886+00:00 | appen.com |
| filmai.in | IN | 2024-10-24T13:57:47.938394+00:00 | filmai.in |
| drizly.com | US | 2024-10-24T13:54:41.989213+00:00 | drizly.com |
| robinhood.com | US | 2024-10-24T13:51:43.397411+00:00 | robinhood.com |
| legilog.fr | FR | 2026-04-27T16:54:26.899285+00:00 | legilog.fr |
| www.legilog.fr | FR | 2024-10-29T15:40:17.819338+00:00 | legilog.fr |
| northernsafety.com | US | 2026-04-27T16:54:44.683135+00:00 | northernsafety.com |
| rylandpeters.com | GB | 2024-08-22T15:06:33.868839+00:00 | rylandpeters.com |
| www.pindrophearing.co.uk | GB | 2024-08-21T15:18:11.261294+00:00 | pindrophearing.co.uk |
| globacap.com | GB | 2024-08-21T10:09:16.050159+00:00 | globacap.com |
| sfr.fr | FR | 2024-11-23T16:46:41.376671+00:00 | sfr.fr |
| www.gannons.co.uk | GB | 2024-06-14T16:27:59.917906+00:00 | www.gannons.co.uk |
| Borrer Executive Search | CH | 2024-06-13T17:37:11.181762+00:00 | borrerexecutive.com |
| www.bigalsfoodservice.co.uk | GB | 2024-06-13T17:36:15.060762+00:00 | bigalsfoodservice.co.uk |
| apex.uk.net | GB | 2024-06-12T06:43:15.021059+00:00 | apex.uk.net |
| AlphaNovaCapital | HK | 2024-06-12T06:41:56.687817+00:00 | alphanovacap.com |
| AMI Global Assistance | GB | 2024-06-12T06:40:50.402092+00:00 | x.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
🏹 Campaigns & malware
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron