🏹 arcusmedia — Ransomware
Arcus Media is a ransomware-as-a-service group that emerged in May 2024, employing double extortion with ChaCha20 + RSA-2048 encryption and recruiting affiliates via a referral-based vetting process, claiming 50+ victims across manufacturing, healthcare, retail, and business services globally.
Classification
Ransomware
Leak-site victims
107
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (107)
| Victim | Country | Published | Domain |
|---|---|---|---|
| Power Moendas | BR | 2026-07-26T10:02:21.907447+00:00 | powermoendas.com.br |
| Brazer Ingenierie | MA | 2026-07-26T10:02:57.471257+00:00 | brazeringenierie.com |
| I-FITNESS | NG | 2026-07-14T20:09:51.755307+00:00 | ifitness.ng |
| Be Travel | ZA | 2026-07-14T20:11:03.281611+00:00 | betravel.co.za |
| Distribox | FR | 2026-07-14T20:11:39.093809+00:00 | distribox.fr |
| gemese.pt | PT | 2026-07-14T20:12:22.385128+00:00 | gemese.pt |
| Perpustam | MY | 2026-07-14T20:12:59.978260+00:00 | Perpustam.gov.my |
| COREBI(NowVertical) | CA | 2026-07-14T20:10:27.401558+00:00 | NowVertical.com |
| East African Gasoil | KE | 2026-07-06T07:09:21.607087+00:00 | eastafricangasoil.com |
| Accflex ERP | AE | 2025-09-17T00:51:35.795037+00:00 | www.accflex.com |
| Tunad | NO | 2025-09-17T00:51:56.067775+00:00 | tunad.io |
| Grup Gestio | ES | 2025-09-17T00:52:15.931104+00:00 | grupgestio.net |
| Announcement 16-09-2025 | 2025-09-16T23:46:15.959928+00:00 | — | |
| EB Farmacutica | BR | 2025-08-12T23:19:12.904415+00:00 | ebfarmaceutica.com.br |
| College stjb | FR | 2025-07-27T22:47:14.024690+00:00 | stjb-delasalle.fr |
| CCI Torrevieja | ES | 2025-07-27T22:47:43.744968+00:00 | ccitorrevieja.com |
| I.P. One LTD | GB | 2025-07-26T01:14:03.124840+00:00 | ipone.co.th |
| SubsCorp | CO | 2025-07-22T01:13:25.326498+00:00 | subscorp.com.co |
| Protech Medical | US | 2025-07-22T01:14:17.142144+00:00 | www.protechmedical.co.uk |
| RG Mexico | MX | 2025-07-05T16:14:01.938059+00:00 | rgmexico.com.mx |
| BD Group | BD | 2025-07-05T16:14:34.644493+00:00 | bdgroup.com.bd |
| Assetlabs | CA | 2025-07-05T16:15:03.496762+00:00 | assetlabs.com |
| Acorn Sales | US | 2025-05-30T10:43:54.877483+00:00 | www.acornsales.com |
| STANDBYTE | BR | 2025-05-30T10:45:08.459930+00:00 | standbyte.com.br |
| Antea Luce | IT | 2025-05-26T02:41:59.436214+00:00 | www.antealuce.com |
| Grupo Boulevard | ES | 2025-05-18T00:18:25.850057+00:00 | grupoboulevard.com |
| RECI SYSTEMS | IN | 2025-05-18T00:19:55.670449+00:00 | www.recisystems.com |
| Road Development Corporation | MV | 2025-05-18T00:21:27.201592+00:00 | www.rdc.com.mv |
| Fong Shann Printing Philippines | PH | 2025-05-18T00:22:36.645999+00:00 | fongshann.com.ph |
| Colegio de la Compania de Maria Vigo | ES | 2025-05-18T00:23:45.846776+00:00 | ciamariavigo.org |
| Kiribati Government | KI | 2025-03-19T00:23:55.943024+00:00 | kao.gov.ki |
| THX Transport | US | 2025-03-19T00:25:46.455306+00:00 | thxtransport.com |
| Coopertruni | CO | 2025-03-19T00:27:17.371119+00:00 | coopertruni.com.br |
| HYPERNOVA TELECOM | BR | 2025-03-12T03:48:21.663694+00:00 | hypernovatelecom.com.br |
| HYPONAMIRU | CZ | 2025-03-12T03:49:53.941208+00:00 | hyponamiru.cz |
| REYCOTEL | ES | 2025-03-07T23:43:57.315089+00:00 | reycotel.com |
| synaptic.co.tz | TZ | 2025-03-03T19:54:54.515574+00:00 | synaptic.co.tz |
| Grafitec | GB | 2025-03-03T19:56:10.733999+00:00 | grafitec.co.uk |
| RJ IT Solutions | US | 2025-03-03T19:57:41.276917+00:00 | rjitsolutions.com |
| logic insectes | FR | 2025-03-03T19:58:57.256036+00:00 | logicinsectes.com |
| Itapeseg | BR | 2025-03-03T20:00:19.734007+00:00 | itapeseg.com.br |
| Openreso | FR | 2025-03-03T20:01:42.208474+00:00 | openreso.com |
| LINKGROUP | ZA | 2025-03-03T20:02:54.037326+00:00 | linkgroup.co.za |
| Falcon Gaming | AU | 2025-02-01T01:00:45.408514+00:00 | falcongaming.com.au |
| Eascon | BR | 2025-02-01T00:59:12.982047+00:00 | eascon.com.br |
| Utilissimo Transportes | BR | 2025-02-01T00:57:41.736421+00:00 | utilissimo.com.br |
| GATTELLI SpA | IT | 2025-02-01T00:56:11.122692+00:00 | gattelli.it |
| Technico | BR | 2025-02-01T00:54:40.078973+00:00 | technico.com.br |
| Engenet Informatica | BR | 2024-12-29T18:11:56.845642+00:00 | engenet-recife.com |
| IEC + EMCO | PK | 2024-12-29T18:13:03.155652+00:00 | iec.com.pk |
| Meerapfel Family | DE | 2024-12-29T18:14:05.198457+00:00 | meerapfel.com |
| Innois | CH | 2024-12-29T18:15:13.389497+00:00 | innois.in |
| Wosac | TZ | 2024-12-29T18:16:15.036038+00:00 | Wosac.co.tz |
| Megaexit | US | 2024-12-29T18:17:17.411911+00:00 | megaexit.com |
| Hi-Raise Constructions Holding | AE | 2024-12-29T18:18:20.085934+00:00 | hi-raise.com |
| Enge Ilha Construção | BR | 2024-12-29T18:19:21.886720+00:00 | engeilha.com.br |
| ICO | BR | 2025-03-03T19:53:16.136928+00:00 | ico.com.br |
| Symantric IT | US | 2024-11-21T19:11:07.917387+00:00 | — |
| MGEMAL | US | 2024-11-21T19:12:11.726326+00:00 | mgemal.com |
| IT Networks | MX | 2024-11-21T00:37:35.260422+00:00 | itnetworks.mx |
| HM Environmental Services | US | 2024-11-21T00:38:39.430229+00:00 | hmenvironmental.com |
| Trust Seeds | JO | 2024-11-21T00:39:41.506514+00:00 | trustseeds.com |
| Barneek Safety Consultancies | AE | 2024-11-21T00:40:57.647376+00:00 | barneekleptis.ae |
| PK Mulyo | ID | 2024-11-21T00:41:58.989697+00:00 | mulyo.com |
| Surfnet Communications | US | 2024-10-29T17:19:12.819566+00:00 | surfnetc.com |
| Country Club El Bosque | CL | 2024-10-20T18:04:59.384048+00:00 | elbosque.org.pe |
| Vasesa | MX | 2024-10-20T18:06:05.184319+00:00 | Vasesa.com.mx |
| Superior Quality Insurance Agency | US | 2024-10-20T18:07:09.206089+00:00 | sqiagency.com |
| Petropolis Pet Resort | BR | 2024-10-20T18:08:12.693289+00:00 | petropolis.com |
| Interbel | ES | 2024-10-20T18:09:16.008322+00:00 | interbel.es |
| Nova Sinseg | KR | 2024-09-24T10:34:05.912781+00:00 | novasinseg.com.br |
| Solutii Sistemas | BR | 2024-09-24T10:35:10.435317+00:00 | Solutii.com.br |
| Partners Air | CH | 2024-09-24T10:36:13.717855+00:00 | airpartner.com |
| Frigocenter | BR | 2024-09-24T10:37:17.497359+00:00 | Frigocenter.com.br |
| Emtel | MU | 2024-09-15T15:59:37.110751+00:00 | emtel.com |
| UNI-PA A.Ş | TR | 2024-09-15T01:31:23.660403+00:00 | unipa.com.tr |
| Like Family’s | PR | 2024-09-15T01:32:29.691383+00:00 | likefamilypr.com |
| Rextech | MY | 2024-09-15T01:33:34.151104+00:00 | rextechpc.com.my |
| Gino Giglio Generation Spa | IT | 2024-09-15T01:34:41.370059+00:00 | gigliospa.com |
| Doodle Tech | AE | 2024-07-20T15:39:28.945513+00:00 | doodletech.ae |
| Freightliner of Grand Rapids & Kalamazoo | US | 2024-06-29T17:15:47.702726+00:00 | ftlgr.com |
| DatAnalítica | DM | 2024-06-29T17:16:22.266895+00:00 | datanalitica.com |
| Clima Lodi | IT | 2024-06-29T17:16:54.128585+00:00 | climalodi.com |
| Total Revisjon DA | NO | 2024-06-27T11:38:37.901212+00:00 | totalrevisjon.no |
| GED Lawyers | US | 2024-07-12T11:33:42.448542+00:00 | gedlawyers.com |
| GED Lawyers – Sells Open | 2024-06-27T11:39:17.046064+00:00 | — | |
| GED Lawyers & .. | US | 2024-06-20T13:48:16.890310+00:00 | gedlawyers.com |
| BankSelfStorage | GB | 2024-06-20T13:48:59.241214+00:00 | bankselfstorage.com |
| Exhaustpro shops | US | 2024-06-20T13:49:38.746997+00:00 | exhaustproshops.com |
| WinFashion ERP | US | 2024-06-12T06:44:27.211658+00:00 | winfashion.com |
| Immediate Transport – UK | GB | 2024-06-04T00:56:26.785392+00:00 | immediatetransport.com |
| Botselo | ZA | 2024-06-04T00:57:15.563469+00:00 | botselo.co.za |
| BHMAC | HR | 2024-06-04T00:57:49.066094+00:00 | bhmac.org |
| Duque Saldarriaga | CO | 2024-06-04T00:58:21.123712+00:00 | duquesaldarriaga.com |
| Franja IT Integradores de Tecnología | CO | 2024-06-04T00:58:56.696210+00:00 | — |
| Langescheid GbR | DE | 2024-06-04T00:59:31.389714+00:00 | langescheid.com |
| Colégio Nova Dimensão | BR | 2024-05-18T14:45:24.011436+00:00 | colegiond.com.br/ |
| Egyptian Sudanese | SD | 2024-05-16T04:27:01.468506+00:00 | egyptiansudanese.com |
| RIO TECHNOLOGY | US | 2024-05-16T04:28:09.650220+00:00 | riotechnology.com.co |
| GOLD RH S.A.S | CO | 2024-05-15T05:33:20.023903+00:00 | Goldrh.com.co |
| Grupo SASMET | BR | 2024-05-15T05:32:11.986638+00:00 | sasmet.com.br |
| Frigrífico Boa Carne | BR | 2024-05-15T05:35:05.581804+00:00 | Frigboacarne.com.br |
| Cusat | AR | 2024-05-15T05:36:30.338955+00:00 | Cusat.com.ar |
| FILSCAP | PH | 2024-05-15T05:37:36.594626+00:00 | Filscap.com.ph |
| Thibabem Atacadista | BR | 2024-05-15T05:38:40.949118+00:00 | Thibabem.com.br |
| Braz Assessoria Contábil | BR | 2024-05-15T05:39:50.004269+00:00 | Brazcontabil.com.br |
| BRAZIL GOV | BR | 2024-05-15T05:40:59.069123+00:00 | Santoantoniodapatrulha.rs.gov.br |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron