🏹 babuk2 — Ransomware
Babuk Locker 2.0, also known as Bjorka or SkyWave, after failing to make any profit from selling public databases on forums, decided to impersonate Babuk Ransomware group. He launched a blog where he claimed multiple public breaches from BreachForums as ransomware attacks
Classification
Ransomware
Leak-site victims
180
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (180)
| Victim | Country | Published | Domain |
|---|---|---|---|
| tecnologias.mspz2.gob.ec | EC | 2025-04-23T19:48:55.140399+00:00 | tecnologias.mspz2.gob.ec |
| turkish defense military | TR | 2025-04-04T06:52:57.514597+00:00 | — |
| Secret plans of Indian army | 2025-04-03T23:28:07.146450+00:00 | — | |
| Bangladesh Armed Forces (BangLadesh Army) | BD | 2025-04-03T23:27:30.316880+00:00 | — |
| Saudi Arabian military and government internal center | SA | 2025-04-03T23:26:56.012913+00:00 | — |
| Hellenic Airforce | GR | 2025-04-03T23:26:21.511234+00:00 | — |
| gangotreehomes.com (RealEstate) | IN | 2025-04-03T23:28:41.834070+00:00 | gangotreehomes.com |
| kfar hatta medical center - Lebanon | LB | 2025-04-03T21:51:01.030698+00:00 | — |
| Iran gas service system | IR | 2025-04-03T21:52:15.684759+00:00 | — |
| ezbuy.sg (Singapore Shopping) | SG | 2025-04-03T21:53:23.508203+00:00 | ezbuy.sg |
| Polizia italia mail access | IT | 2025-04-03T03:20:43.528510+00:00 | poliziadistato.it |
| zalora.sg (Singapore Shopping) | SG | 2025-04-03T03:19:34.890300+00:00 | zalora.sg |
| aosense.com - AO Sense INC. | US | 2025-04-02T20:16:55.073122+00:00 | aosense.com |
| navy-mil-bd | BD | 2025-04-02T18:47:41.007878+00:00 | — |
| drdo.gov.in | IN | 2025-04-02T01:49:06.569826+00:00 | drdo.gov.in |
| uniproof.com.br | BR | 2025-04-01T21:17:33.850443+00:00 | uniproof.com.br |
| (UPDATE) - whitecapcanada.com | CA | 2025-04-01T16:52:39.653138+00:00 | — |
| pln.co.id - PLN INDONESIA | ID | 2025-03-31T17:24:56.678924+00:00 | pln.co.id |
| moh.gov.rw | RW | 2025-03-31T17:23:49.433522+00:00 | moh.gov.rw |
| iDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers | US | 2025-03-29T16:24:09.007725+00:00 | — |
| brune.com.br - Group MC (conglomerate) | BR | 2025-03-29T02:49:11.993029+00:00 | brune.com.br |
| icvc.co - Instituto Cardiovascular del Cesar | CO | 2025-03-29T02:46:53.148970+00:00 | icvc.co |
| La Futura | IT | 2025-03-29T01:22:05.494387+00:00 | — |
| Atlantic Coast Consulting Inc | US | 2025-03-29T01:20:56.601793+00:00 | — |
| theeyeclinicsurgicenter.com - The Eye Clinic Surgicenter company | 2025-03-29T01:19:48.175219+00:00 | — | |
| leadzen.ai | IN | 2025-03-28T17:54:39.195735+00:00 | leadzen.ai |
| healthcasts.com | US | 2025-03-28T17:53:10.827836+00:00 | healthcasts.com |
| pureincubation.com | US | 2025-03-28T17:51:42.048407+00:00 | pureincubation.com |
| unired.uz | UZ | 2025-03-28T14:50:12.151430+00:00 | unired.uz |
| nadra.gov.pk - NADRA official Of Pakistan Army & (Andhra Pradesh) | PK | 2025-03-27T07:51:50.113913+00:00 | nadra.gov.pk |
| aman-iraq.com | IQ | 2025-03-26T22:54:25.215139+00:00 | aman-iraq.com |
| crimsgroup.com | US | 2025-03-26T22:55:54.716762+00:00 | crimsgroup.com |
| mot.gov.iq - Iraqi Ministry of Commerce (Of Trade) | IQ | 2025-03-26T13:14:55.116738+00:00 | — |
| israel Infrastructure & Secret Documents intelligence information | IL | 2025-03-26T13:13:47.274986+00:00 | — |
| kalesavunma.com - KALE SAVUNMA. | TR | 2025-03-25T22:54:40.688080+00:00 | — |
| airexplore.aero | SK | 2025-03-24T21:24:14.106309+00:00 | airexplore.aero |
| iberdrola.com (Spain energy) | ES | 2025-03-24T19:55:49.059581+00:00 | — |
| Synesis Surveillance System | RU | 2025-03-22T14:54:11.625401+00:00 | — |
| inmarsat.com | GB | 2025-03-22T11:54:22.722427+00:00 | inmarsat.com |
| jp-property.com | JP | 2025-03-22T11:52:54.165559+00:00 | jp-property.com |
| armetal.com | SA | 2025-03-21T19:49:28.800788+00:00 | armetal.com |
| The Ticktin Law Group | US | 2025-03-21T07:23:44.129785+00:00 | — |
| Mpaj.gov.my | MY | 2025-03-21T07:22:36.881712+00:00 | Mpaj.gov.my |
| exostar.com TOP Defense AS | 2025-03-21T02:53:30.611779+00:00 | — | |
| Standard Capital Securities (Pvt) Backoffice - Pakistan Stock Market Data Vault | PK | 2025-03-21T01:22:50.633507+00:00 | — |
| mohrss.gov.cn ( Ministry of Human Resources and Social Security ) | CN | 2025-03-20T23:53:53.224611+00:00 | — |
| amazon.com | US | 2025-03-20T23:52:45.282121+00:00 | amazon.com |
| fr.sodexo.com | FR | 2025-03-20T13:57:27.548048+00:00 | fr.sodexo.com |
| Corporate access, up to Shipping Apps in QATAR | QA | 2025-03-20T13:55:58.377218+00:00 | — |
| woqod.com | QA | 2025-03-20T13:54:50.152728+00:00 | woqod.com |
| mof.go.th - Ministry of Finance (Thailand) | TH | 2025-03-20T13:53:18.016625+00:00 | — |
| smic.mi.th (Thailand Intelligence Agency) | TH | 2025-03-20T09:23:02.565720+00:00 | — |
| www.gob.ve | VE | 2025-03-19T19:58:58.053950+00:00 | gob.ve |
| Access Panel Financial Technology Company (Thailand) | TH | 2025-03-19T19:57:28.362554+00:00 | — |
| United States County Palm Beach Goverment | US | 2025-03-19T19:56:19.915513+00:00 | — |
| Municipal taxation Secretariat Access - Brazil Goverment | BR | 2025-03-19T19:55:10.541623+00:00 | — |
| Intelligence Bureau of the Joint Staff Department of the Central Military Commission... | CN | 2025-03-19T18:28:07.133447+00:00 | — |
| rac.gov.my | MY | 2025-03-19T18:26:46.777294+00:00 | rac.gov.my |
| nimapinfotech.com | IN | 2025-03-19T18:25:18.141505+00:00 | nimapinfotech.com |
| esaote.com | IT | 2025-03-18T18:27:45.876867+00:00 | esaote.com |
| nstda.or.th | TH | 2025-03-18T18:26:16.639947+00:00 | nstda.or.th |
| pajak.go.id | ID | 2025-03-18T18:23:38.278429+00:00 | pajak.go.id |
| dukcapil.kemendagri.go.id (SIAK DUKCAPIL MINISTRY OF HOME AFFAIRS OF INDONESIA) | ID | 2025-03-18T18:22:09.638144+00:00 | — |
| whitecapcanada.com | CA | 2025-03-18T15:24:41.151190+00:00 | whitecapcanada.com |
| hcahealthcare.com INC. | US | 2025-03-18T13:47:38.226671+00:00 | — |
| sp.tnitelecom.com | US | 2025-03-18T12:23:21.231865+00:00 | sp.tnitelecom.com |
| Otelier.io | US | 2025-03-18T12:21:50.621611+00:00 | Otelier.io |
| highwirepress.com | US | 2025-03-18T07:45:36.876154+00:00 | highwirepress.com |
| taobao.com | CN | 2025-03-17T02:51:54.254234+00:00 | taobao.com |
| This entry has been removed following a request from the company | CN | 2025-03-17T02:50:24.950621+00:00 | — |
| icmr.gov.in | IN | 2025-03-17T01:20:09.646179+00:00 | icmr.gov.in |
| Ministry Of Defense of the Republic Of Korea | KR | 2025-03-16T23:46:12.358173+00:00 | — |
| JD.com Inc (Chinese) | CN | 2025-03-16T23:45:02.891531+00:00 | — |
| Orange.com | FR | 2025-03-16T14:49:09.799870+00:00 | Orange.com |
| Florida Department of Transportation (FDOT) | US | 2025-03-16T14:50:17.779603+00:00 | fdot.gov |
| Belarus E-commerce & Energy Data | BY | 2025-03-15T10:23:47.937201+00:00 | — |
| nrru.ac.th - University | TH | 2025-03-15T10:21:30.362339+00:00 | nrru.ac.th |
| iaai.com - Washington DC DMV | US | 2025-03-14T12:45:39.814785+00:00 | iaai.com |
| The Ministry of National Defense - mod.gov.vn (NavyVietnam) | VN | 2025-03-14T10:14:13.674455+00:00 | mod.gov.vn |
| movistar.com.pe | PE | 2025-03-14T10:13:05.357612+00:00 | movistar.com.pe |
| Intelligence Bureau of the Joint Staff Department of the Central Military Commission China | CN | 2025-03-14T07:56:32.049126+00:00 | — |
| Indian military and government defense 20TB | 2025-03-14T07:55:25.323579+00:00 | — | |
| web.asia.edu.tw - Taiwan (Asia University) | TW | 2025-03-14T07:57:39.205368+00:00 | asia.edu.tw |
| parliament.iq | IQ | 2025-03-14T07:59:14.671138+00:00 | parliament.iq |
| nuclep.gov.br. Nuclep Brazil | BR | 2025-03-14T08:00:24.465760+00:00 | nuclep.gov.br |
| cch.org.tw - Changhua Christian Hospital | TW | 2025-03-14T08:01:36.971708+00:00 | cch.org.tw |
| Iraqi Council of Ministers | IQ | 2025-03-13T00:55:53.024630+00:00 | cabinet.iq |
| Iraqi Ministry of Finance | IQ | 2025-03-13T00:57:00.278125+00:00 | mof.gov.iq |
| marinabaysands.com - Singapore Hotel (Internal Server) | SG | 2025-03-12T17:25:18.390029+00:00 | marinabaysands.com |
| hitekgroup.in india Finance | IN | 2025-03-12T14:23:00.536047+00:00 | hitekgroup.in |
| India's telecommunication network | IN | 2025-03-12T12:51:09.622822+00:00 | — |
| Baykar Turkish defense company C4I and artificial intelligence | TR | 2025-03-12T00:55:01.797551+00:00 | c4i.com |
| airexplore.aero Company | SK | 2025-03-11T14:23:49.968694+00:00 | airexplore.aero |
| fnde.gov.br brazilian government | BR | 2025-03-11T02:54:53.665138+00:00 | fnde.gov.br |
| wapda.gov.pk | PK | 2025-03-11T02:53:44.345830+00:00 | wapda.gov.pk |
| lexmark.com Company | US | 2025-03-11T02:52:35.248194+00:00 | lexmark.com |
| forvismazars.com.fr ( mazars.fr ) | FR | 2025-03-11T01:24:04.644521+00:00 | forvismazars.com |
| petstop.com Company | US | 2025-03-10T23:52:00.485352+00:00 | petstop.com |
| misaludhealth.com | US | 2025-03-10T23:51:25.769699+00:00 | misaludhealth.com |
| Access to Indian Ministry of Defence and Military Secret (DRDO) documents By Babuk Locker ... | IN | 2025-03-10T22:21:50.457383+00:00 | — |
| bank.pingan.com (CN) | CN | 2025-03-10T22:22:57.951986+00:00 | — |
| Mandarin.com.br | BR | 2025-03-10T19:23:53.013276+00:00 | mandarin.com.br |
| Taiwan - Mackay Hospital | TW | 2025-03-14T08:02:46.812543+00:00 | mmh.org.tw |
| INDONESIA TAXPAYER IDENTIFICATION NUMBER (NPWP) | ID | 2025-01-28T18:12:41.313628+00:00 | — |
| MYINDIHOME TELKOM INDONESIA by ( Babuk Locker ) | ID | 2025-01-28T16:03:28.506150+00:00 | — |
| MYINDIHOME TELKOM INDONESIA | ID | 2025-01-28T15:13:39.419803+00:00 | — |
| MYPERTAMINA INDONESIA | ID | 2025-01-28T05:56:12.792786+00:00 | mypertamina.id |
| copral.com.br | BR | 2025-01-27T11:39:01.920679+00:00 | copral.com.br |
| alentec.com | SE | 2025-01-27T08:25:47.044831+00:00 | alentec.com |
| Württemberger Medien | DE | 2025-01-27T08:23:39.331415+00:00 | w-medien.de |
| viacaojacarei.com.br | BR | 2025-01-27T08:21:19.839870+00:00 | viacaojacarei.com.br |
| gelco-s-a.com.br | BR | 2025-01-27T08:19:03.809719+00:00 | gelco-s-a.com.br |
| Kurosu & Co.SA - kurosu.com.py | PY | 2025-01-27T08:17:55.100458+00:00 | kurosu.com.py |
| zapopan.gob.mx | MX | 2025-01-27T08:16:43.194319+00:00 | zapopan.gob.mx |
| carc.gov.jo | JO | 2025-01-27T08:14:30.414217+00:00 | carc.gov.jo |
| nhbg.com.co | CO | 2025-01-27T08:13:22.579172+00:00 | nhbg.com.co |
| APMS ( Advanced Physician Management Service LLC | US | 2025-01-27T08:12:07.264496+00:00 | — |
| a top-tier law firm in Workers Compensation Defense! | 2025-01-27T08:10:50.962216+00:00 | — | |
| precisediagnosticspacs.com | US | 2025-01-27T08:09:41.739689+00:00 | precisediagnosticspacs.com |
| zetech.ac.ke | KE | 2025-01-27T08:08:32.362363+00:00 | zetech.ac.ke |
| maxprofit.mcode.me | 2025-01-27T08:07:25.747991+00:00 | maxprofit.mcode.me | |
| skopje.gov.mk | MK | 2025-01-27T08:06:17.796244+00:00 | skopje.gov.mk |
| rtdc.gov.mn | MN | 2025-01-27T08:05:09.547638+00:00 | rtdc.gov.mn |
| pbos.gov.pk | PK | 2025-01-27T08:04:01.780826+00:00 | pbos.gov.pk |
| abd-ong.org | ES | 2025-01-27T08:02:53.170257+00:00 | abd-ong.org |
| mtgazeta.uz | UZ | 2025-01-27T08:01:44.753873+00:00 | mtgazeta.uz |
| sincorpe.org.br | BR | 2025-01-27T08:00:33.742227+00:00 | sincorpe.org.br |
| pti.agency | DE | 2025-01-27T07:58:37.879265+00:00 | pti.agency |
| singularanalysts.com | US | 2025-01-27T07:57:28.533212+00:00 | singularanalysts.com |
| gervetusa.com | US | 2025-01-27T07:56:21.269929+00:00 | gervetusa.com |
| workers.com.zm | ZM | 2025-01-27T07:55:11.863960+00:00 | workers.com.zm |
| wacer.com.au | AU | 2025-01-27T07:54:05.484432+00:00 | wacer.com.au |
| thebetareview.com | US | 2025-01-27T07:51:57.519826+00:00 | thebetareview.com |
| senseis.xmp.net | 2025-01-27T07:50:49.866766+00:00 | senseis.xmp.net | |
| fpsc-anz.com | AU | 2025-01-27T07:48:40.986578+00:00 | fpsc-anz.com |
| mandiricoal.net | IN | 2025-01-27T07:47:32.823498+00:00 | mandiricoal.net |
| dealplexus.com | IN | 2025-01-27T07:46:24.381206+00:00 | dealplexus.com |
| bee-insurance.com | US | 2025-01-27T07:45:16.977242+00:00 | bee-insurance.com |
| lamundialdeseguros.com | CO | 2025-01-27T07:44:09.849888+00:00 | lamundialdeseguros.com |
| indianaerospaceandengineering.com | US | 2025-01-27T07:42:58.246707+00:00 | indianaerospaceandengineering.com |
| gstpam.org | 2025-01-27T07:41:44.111074+00:00 | gstpam.org | |
| www.shootinghouse.com.br | BR | 2025-01-27T07:40:30.365873+00:00 | shootinghouse.com.br |
| headwaterco.com | US | 2025-01-27T07:38:03.251294+00:00 | headwaterco.com |
| www.al-shefafarm.ro | RO | 2025-01-27T07:36:55.618193+00:00 | al-shefafarm.ro |
| www.ykp.com.br | BR | 2025-01-27T07:35:47.549845+00:00 | ykp.com.br |
| www.go4kora.tv | TV | 2025-01-27T07:34:41.059008+00:00 | go4kora.tv |
| www.rekamy.com | MY | 2025-01-27T07:33:30.744088+00:00 | rekamy.com |
| www.dvttechnologyltd.com | US | 2025-01-27T07:32:23.071242+00:00 | dvttechnologyltd.com |
| www.siea.sk | SK | 2025-01-27T07:31:15.560110+00:00 | siea.sk |
| www.spmundi.com.br | BR | 2025-01-27T07:30:00.419441+00:00 | spmundi.com.br |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron