🏹 aurora — Ransomware
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
Classification
Ransomware
Leak-site victims
27
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (27)
| Victim | Country | Published | Domain |
|---|---|---|---|
| GILDE Handwerk Macrander GmbH & Co. KG | DE | 2026-08-04T06:21:33.166294+00:00 | gildehandwerk.com |
| US Installation Group, Inc. | US | 2026-08-04T05:51:32.732260+00:00 | us-installations.com |
| Van Eijck International Car Rescue | NL | 2026-07-30T07:23:44.017849+00:00 | Van Eijck International Car Rescue |
| Evosys Laser GmbH | DE | 2026-07-30T07:23:03.854269+00:00 | Evosys Laser GmbH |
| Pyramid Analytics B.V. | NL | 2026-07-30T07:22:25.881643+00:00 | Pyramid Analytics B.V. |
| Bretford Manufacturing | US | 2026-07-29T06:51:40.642786+00:00 | Bretford Manufacturing |
| Primed Halberstadt Medizintechnik | DE | 2026-06-30T19:51:25.102363+00:00 | Primed Halberstadt Medizintechnik |
| Corporación Primax S.A. | PE | 2026-06-23T06:21:35.978085+00:00 | Corporación Primax S.A. |
| Aerospace & Advanced Composites GmbH | DE | 2026-06-22T14:50:58.039216+00:00 | Aerospace & Advanced Composites GmbH |
| NTP B.V. Civil Engineering Construction | NL | 2026-06-22T09:51:37.622356+00:00 | NTP B.V. Civil Engineering Construction |
| Kochs GmbH | DE | 2026-06-22T09:50:57.145437+00:00 | Kochs GmbH |
| NationsBuilders Insurance Services | 2026-06-22T09:22:20.112884+00:00 | NationsBuilders Insurance Services | |
| Hagerman & Company | 2026-06-19T13:52:11.013934+00:00 | Hagerman & Company | |
| Allan Brothers Fruit | US | 2026-06-16T13:22:03.166497+00:00 | Allan Brothers Fruit |
| Diamond Truck Centres | CA | 2026-06-16T13:21:27.187972+00:00 | Diamond Truck Centres |
| Sumitomo Electric Bordnetze | DE | 2026-06-16T13:20:48.292864+00:00 | Sumitomo Electric Bordnetze |
| ALS Global | AU | 2026-06-19T09:52:18.247753+00:00 | ALS Global |
| Avanti Windows & Doors | US | 2026-05-12T11:20:59.313304+00:00 | Avanti Windows & Doors |
| Atlas Metal Industries Inc | CA | 2026-04-29T21:35:32.937498+00:00 | atlasfoodserv.com |
| Costa Solutions, LLC | US | 2026-04-29T21:35:01.143814+00:00 | costasolutions.com |
| Bayou Title, Inc. | US | 2026-04-29T21:34:40.079394+00:00 | bayoutitle.com |
| Startec Group of Companies | PH | 2026-05-12T09:51:25.114151+00:00 | Startec Group of Companies |
| NorthWest Handling Systems | CA | 2026-05-12T09:50:46.275119+00:00 | NorthWest Handling Systems |
| Law Offices of Michael A. Freedman, P.A. (maflaw.com) | US | 2026-04-29T21:35:56.230279+00:00 | maflaw.com |
| Baresque Group | GB | 2026-04-29T21:36:39.835996+00:00 | baresquegroup.com |
| Cheval Blanc Randheli | MV | 2026-04-29T21:36:18.309015+00:00 | chevalblanc.com |
| Advanta Genetics LLC | US | 2026-04-29T21:37:01.142489+00:00 | aalabs.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
🏹 Campaigns & malware
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron