🏹 avoslocker — Ransomware
AvosLocker is the ransomware payload of the Avos RaaS group, active from July 2021 to approximately May 2023, targeting education, manufacturing, and healthcare sectors on Windows, Linux, and VMware ESXi environments, with the US accounting for ~72% of victims.
Classification
Ransomware
Leak-site victims
70
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (70)
| Victim | Country | Published | Domain |
|---|---|---|---|
| Cambian Group | 2023-02-11T15:54:59.279192+00:00 | caretech-uk.com | |
| Memtech Acoustical | 2023-02-11T15:54:59.227307+00:00 | memtechacoustical.com | |
| Global Mining Products | ID | 2023-02-11T15:54:59.174946+00:00 | — |
| Buckeye Packaging | 2023-02-11T15:54:59.122067+00:00 | — | |
| Wesco Turf | US | 2023-02-11T15:54:59.066062+00:00 | wescoturf.com |
| Schandy | 2023-02-11T15:54:58.961126+00:00 | — | |
| Ultralife Corporation | US | 2023-02-11T15:54:58.863675+00:00 | ultralifecorp.com |
| Hamilton Parker | 2023-02-11T15:53:54.854708+00:00 | hamiltonparker.com | |
| CannonDesign | 2023-02-11T15:54:59.014218+00:00 | cannondesign.com | |
| Corporate Interiors Inc | 2023-01-07T12:30:32.677868+00:00 | — | |
| LW Group | 2022-12-26T16:12:39.371795+00:00 | — | |
| Keyano College | CA | 2022-12-26T16:12:38.868631+00:00 | — |
| McKenzie Health System | 2022-12-26T16:12:38.370888+00:00 | — | |
| Avamere Family of Companies | 2022-12-26T16:12:37.855441+00:00 | — | |
| Yildiz Entegre USA | 2022-12-26T16:12:37.350015+00:00 | — | |
| CMHA National | 2022-12-26T16:12:36.843897+00:00 | — | |
| Chimbusco | CN | 2022-12-26T16:12:36.335905+00:00 | — |
| LPA Design | 2022-12-26T16:12:35.824429+00:00 | — | |
| Public Employees Credit Union | 2022-12-26T16:12:35.317508+00:00 | — | |
| TPI Corporation | 2022-12-26T16:12:34.811956+00:00 | — | |
| CHRISTUS Health | 2022-12-26T16:12:34.303970+00:00 | — | |
| BLUME GLOBAL INC | 2022-12-26T16:12:33.799138+00:00 | — | |
| CPA Mutual Insurance Company | 2022-12-26T16:12:33.293165+00:00 | — | |
| Livingston | 2022-12-26T16:12:32.775402+00:00 | livingstonintl.com | |
| CR2 | SG | 2022-12-26T16:12:32.276286+00:00 | — |
| Bechstein | DE | 2022-12-26T16:12:31.769504+00:00 | — |
| Montmorency College | 2022-12-26T16:12:31.263440+00:00 | — | |
| Transform Data Into Insight | 2022-12-26T16:12:30.747713+00:00 | — | |
| Garnica Plywood | 2022-12-26T16:12:30.246472+00:00 | — | |
| Casa International | 2022-12-26T16:12:29.739055+00:00 | — | |
| WBSCHOOLS | 2022-12-26T16:12:29.238056+00:00 | — | |
| Los Alamos Nature Center | 2022-12-26T16:12:28.722857+00:00 | — | |
| Mount Vernon Mills | 2022-12-26T16:12:28.213815+00:00 | — | |
| Khoemacau Copper Mining | BW | 2022-12-26T16:12:27.712074+00:00 | — |
| The Brigantine | 2022-12-26T16:12:27.209174+00:00 | — | |
| SCAD EDU | US | 2022-12-26T16:12:26.700019+00:00 | — |
| Truckslogic | GT | 2022-12-26T16:12:26.191556+00:00 | — |
| TeladanPrima Argo Group | 2022-12-26T16:12:25.686005+00:00 | — | |
| Sunland Asphalt And Construction | 2022-12-26T16:12:25.180972+00:00 | — | |
| Stratford University | 2022-12-26T16:12:24.667501+00:00 | — | |
| Xybion | 2022-12-26T16:12:24.161247+00:00 | — | |
| Our Lady of Lake University | 2022-12-26T16:12:23.656097+00:00 | — | |
| Paul Smiths College | 2022-12-26T16:12:23.153434+00:00 | — | |
| Northwest University | 2022-12-26T16:12:22.644524+00:00 | — | |
| Emtec Inc | 2022-12-26T16:12:22.139487+00:00 | — | |
| American International Industry | 2022-12-26T16:12:21.629384+00:00 | — | |
| Zeus Scientific Inc | 2022-12-26T16:12:21.118282+00:00 | — | |
| Hughes Systems Industrial | 2022-12-26T16:12:20.611528+00:00 | — | |
| DLS Motors | PY | 2022-12-26T16:12:20.090009+00:00 | — |
| Cosmopoint College | 2022-12-26T16:12:19.584371+00:00 | — | |
| ALVAC SA | 2022-12-26T16:12:19.079123+00:00 | — | |
| Memory Express | 2021-09-26T12:46:17.809549+00:00 | — | |
| Huali Industrial Group | 2021-09-25T23:14:07.794250+00:00 | — | |
| Whitefish River First Nation | 2021-09-25T23:14:07.783191+00:00 | — | |
| Unified Technologies | 2021-09-25T23:14:07.771002+00:00 | — | |
| Amphenol Canada | 2021-09-25T23:14:07.761235+00:00 | — | |
| Pacific City Bank | 2021-09-04T00:00:00+00:00 | — | |
| Potter Concrete | 2021-09-01T00:00:00+00:00 | — | |
| Moorfields NHS UK & Dubai | 2021-09-01T00:00:00+00:00 | — | |
| Master Chemical | 2021-08-29T00:00:00+00:00 | — | |
| On logistics Services Algeciras, S.L | 2021-08-28T00:00:00+00:00 | — | |
| Coghlin Electrical Contractors | 2021-08-28T00:00:00+00:00 | — | |
| Home in Brussels | 2021-08-28T00:00:00+00:00 | — | |
| Artas Holding / Artas Insaat | 2021-08-28T00:00:00+00:00 | — | |
| Gimmler Gruppe | 2021-08-19T00:00:00+00:00 | — | |
| SoftwareDesign Consulting Group | US | 2021-08-19T00:00:00+00:00 | sd-lb.com |
| Mauck & Baker | 2021-08-05T00:00:00+00:00 | — | |
| Geneva, Ohio | 2021-06-18T00:00:00+00:00 | — | |
| Heller Injury Lawyers | 2021-06-13T00:00:00+00:00 | — | |
| Arabian Cargo Group | 2021-06-13T00:00:00+00:00 | — |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
🏹 Campaigns & malware
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron