🏹 cactus — Ransomware
The CACTUS ransomware is said to have emerged around March 2023. The group became known for exploiting vulnerabilities to gain initial access and maintain a presence within the organization's infrastructure.<br> <br> There is little known information about the ransomware group, except that it emerged on the mentioned date and, following encryption, a text file named 'cAcTuS.readme.txt' would be created. Additionally, encrypted files were altered to the '.cts1' extension, and data exfiltration and victim extortion were conducted through the use of the service known as Tox.<br>Source: https://gi
Classification
Ransomware
Leak-site victims
248
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (248)
| Victim | Country | Published | Domain |
|---|---|---|---|
| kyb.com | JP | 2025-03-17T11:52:42.658429+00:00 | kyb.com |
| assaabloy.com | SE | 2025-03-17T11:54:21.512710+00:00 | assaabloy.com |
| urban1.com | US | 2025-03-12T10:47:05.728760+00:00 | urban1.com |
| quigleyeye.com | US | 2025-03-03T18:23:15.647920+00:00 | quigleyeye.com |
| rocketstores.com | US | 2025-03-12T10:45:26.522163+00:00 | rocketstores.com |
| lifting.com | US | 2025-02-25T17:23:00.827490+00:00 | lifting.com |
| chfindustries.com | US | 2025-02-24T14:08:36.927274+00:00 | chfindustries.com |
| This entry has been removed following a request from the company. | US | 2025-02-17T17:06:02.255029+00:00 | — |
| bluedge.com | US | 2025-02-25T18:53:39.451659+00:00 | bluedge.com |
| regulvar.com | CA | 2025-02-24T13:59:33.745577+00:00 | regulvar.com |
| britannicahome.com | US | 2025-02-12T08:38:59.591879+00:00 | britannicahome.com |
| thermoid.com | US | 2025-03-12T13:56:54.828604+00:00 | thermoid.com |
| everelgroup.com | IT | 2025-02-24T14:01:35.991357+00:00 | everelgroup.com |
| baillie.com | US | 2025-03-12T13:55:14.238655+00:00 | baillie.com |
| tempel.com | US | 2025-03-12T13:58:38.647025+00:00 | tempel.com |
| caltrol.com | US | 2025-02-26T20:24:55.136007+00:00 | caltrol.com |
| aiibeauty.com | US | 2025-02-24T14:06:51.388318+00:00 | aiibeauty.com |
| formanmills.com | US | 2025-02-24T14:05:06.671521+00:00 | formanmills.com |
| amalgamatedsugar.com | US | 2025-02-24T14:03:19.658645+00:00 | amalgamatedsugar.com |
| associatedasset.com | US | 2025-02-24T12:02:44.641554+00:00 | associatedasset.com |
| grede.com | US | 2025-02-24T12:00:45.132800+00:00 | grede.com |
| pace-usa.com | US | 2025-02-24T11:56:57.523721+00:00 | pace-usa.com |
| uniekinc.com | US | 2025-02-18T19:26:28.587186+00:00 | uniekinc.com |
| steelerubber.com | US | 2025-02-17T17:09:25.763599+00:00 | steelerubber.com |
| almostfamousclothing.com | US | 2025-02-17T17:07:42.363359+00:00 | almostfamousclothing.com |
| ssmcoop.com | US | 2025-02-17T17:04:15.798541+00:00 | ssmcoop.com |
| bestbrands.com | US | 2025-02-18T19:21:21.398961+00:00 | bestbrands.com |
| stanleyconsultants.com | US | 2025-02-28T22:51:12.508217+00:00 | stanleyconsultants.com |
| holtcat.com | US | 2025-02-26T15:56:06.211418+00:00 | holtcat.com |
| electrocraft.com | US | 2025-02-24T12:04:26.001567+00:00 | electrocraft.com |
| uniquehd.com | US | 2025-02-12T08:37:17.384080+00:00 | uniquehd.com |
| savoiesfoods.com | US | 2025-02-06T19:24:33.169406+00:00 | savoiesfoods.com |
| rashtiandrashti.com | US | 2025-02-04T08:58:42.341321+00:00 | rashtiandrashti.com |
| mgainnovation.com | US | 2025-02-04T11:03:23.552500+00:00 | mgainnovation.com |
| alphabaking.com | US | 2025-02-26T15:54:18.799666+00:00 | alphabaking.com |
| curtisint.com | CA | 2025-02-12T08:41:04.751957+00:00 | curtisint.com |
| sunrise-soya.com | CA | 2025-01-30T23:13:20.559571+00:00 | sunrise-soya.com |
| vsstransportationgroup.com | US | 2025-01-30T23:15:42.408143+00:00 | vsstransportationgroup.com |
| midwayimporting.com | US | 2025-02-18T19:24:47.780945+00:00 | midwayimporting.com |
| alkodistributors.com | US | 2025-01-30T23:25:45.537694+00:00 | alkodistributors.com |
| jayaapparelgroup.com | US | 2025-01-30T23:20:27.568317+00:00 | jayaapparelgroup.com |
| johnpaulrichard.com | US | 2025-01-30T23:18:05.604795+00:00 | johnpaulrichard.com |
| revitalash.com | US | 2025-02-18T19:23:05.696432+00:00 | revitalash.com |
| kinseysinc.com | US | 2025-02-17T17:11:10.744697+00:00 | kinseysinc.com |
| ttucorp.com | US | 2025-01-30T23:23:13.933648+00:00 | ttucorp.com |
| branchgroup.com | US | 2025-02-24T11:58:37.644186+00:00 | branchgroup.com |
| biagibros.com | US | 2025-03-21T15:19:52.222231+00:00 | biagibros.com |
| newhorizonsbaking.com | US | 2025-02-20T19:26:31.291392+00:00 | newhorizonsbaking.com |
| optiline.com | EE | 2025-03-21T15:22:52.137571+00:00 | optiline.com |
| cornwelltools.com | US | 2025-02-04T09:00:34.988599+00:00 | cornwelltools.com |
| fplfood.com | US | 2025-03-21T15:21:10.284828+00:00 | fplfood.com |
| galatachemicals.com | US | 2024-12-23T17:45:42.263617+00:00 | galatachemicals.com |
| adveo.com | FR | 2024-12-23T08:49:31.683259+00:00 | adveo.com |
| massdevelopment.com | US | 2024-12-18T10:26:34.011236+00:00 | massdevelopment.com |
| ptcky.com | US | 2024-12-23T11:38:44.194944+00:00 | ptcky.com |
| awimc.com | US | 2024-12-23T18:56:07.021496+00:00 | awimc.com |
| ottosimon.co.uk | GB | 2024-11-08T08:33:42.562299+00:00 | ottosimon.co.uk |
| picsolve.com | US | 2024-10-24T10:09:50.253160+00:00 | picsolve.com |
| lumiplan.com | FR | 2024-11-01T19:43:25.472059+00:00 | lumiplan.com |
| synertrade.com | FR | 2024-10-16T09:08:38.723360+00:00 | synertrade.com |
| lsst.ac | GB | 2024-11-01T13:24:10.795807+00:00 | lsst.ac |
| bcllegal.com | GB | 2024-10-24T10:06:33.093659+00:00 | bcllegal.com |
| hacla.org | US | 2024-10-31T11:15:43.809129+00:00 | hacla.org |
| matki.co.uk | GB | 2024-10-08T13:09:34.909776+00:00 | matki.co.uk |
| www.amchar.com | US | 2024-09-25T08:01:21.229439+00:00 | amchar.com |
| kjtait.com | GB | 2024-09-25T08:04:31.908945+00:00 | kjtait.com |
| hindlegroup.com | GB | 2024-09-25T08:07:44.471900+00:00 | hindlegroup.com |
| www.galab.com | DE | 2024-10-01T10:01:21.573653+00:00 | galab.com |
| actionfirepros.com | US | 2024-09-27T11:03:22.492778+00:00 | actionfirepros.com |
| thomas-lloyd.com | US | 2024-09-17T12:42:21.596663+00:00 | thomas-lloyd.com |
| ten8fire.com | US | 2024-09-23T11:34:20.891893+00:00 | ten8fire.com |
| peerlessumbrella.com | US | 2024-09-17T12:45:38.582849+00:00 | peerlessumbrella.com |
| riomarineinc.com | US | 2024-09-06T08:24:36.230026+00:00 | riomarineinc.com |
| rangeramerican.com | PR | 2024-09-03T20:32:03.330175+00:00 | rangeramerican.com |
| natcoglobal.com | US | 2024-09-17T17:00:21.012603+00:00 | natcoglobal.com |
| simson-maxwell.com | CA | 2024-09-04T00:08:34.039523+00:00 | simson-maxwell.com |
| flodraulic.com | US | 2024-09-03T20:38:32.884104+00:00 | flodraulic.com |
| mcphillips.co.uk | GB | 2024-09-03T20:35:14.346023+00:00 | mcphillips.co.uk |
| champeau.com | CA | 2024-09-06T08:21:25.186111+00:00 | champeau.com |
| balboabayresort.com | US | 2024-09-04T00:05:18.622756+00:00 | balboabayresort.com |
| exco-solutions.com | DE | 2024-08-05T07:47:15.389000+00:00 | exco-solutions.com |
| denkaiamerica.com | US | 2024-07-30T19:34:01.240655+00:00 | denkaiamerica.com |
| dahlvalve.com | CA | 2024-08-01T12:08:34.174101+00:00 | dahlvalve.com |
| mihlfeld.com | US | 2024-08-08T08:02:01.803029+00:00 | mihlfeld.com |
| securityinstrument.com | US | 2024-08-27T10:10:17.090050+00:00 | securityinstrument.com |
| tibaitservices.com | MX | 2024-08-08T08:28:37.549806+00:00 | tibaitservices.com |
| leonardssyrups.com | US | 2024-07-30T19:36:39.967412+00:00 | leonardssyrups.com |
| westernwyomingbeverages.com | US | 2024-07-30T19:35:51.470021+00:00 | westernwyomingbeverages.com |
| verco.co.uk | GB | 2024-07-16T10:06:03.868392+00:00 | verco.co.uk |
| corporatejobbank.com | US | 2024-10-08T13:06:22.523283+00:00 | corporatejobbank.com |
| demos.fr | FR | 2024-07-30T19:34:56.704617+00:00 | demos.fr |
| westfalia-automotive.com | DE | 2024-06-24T22:13:03.499652+00:00 | westfalia-automotive.com |
| hydmech.com | CA | 2024-06-24T22:15:06.691947+00:00 | hydmech.com |
| chubb-bulleid.co.uk | GB | 2024-07-30T19:37:28.900285+00:00 | chubb-bulleid.co.uk |
| daystar.com | US | 2024-06-23T19:40:31.572330+00:00 | daystar.com |
| isometrix.com | US | 2024-07-17T09:37:10.947171+00:00 | isometrix.com |
| fbttransport.com | US | 2024-06-23T19:41:45.423980+00:00 | fbttransport.com |
| fpr-us.com | US | 2024-06-06T18:15:04.707591+00:00 | fpr-us.com |
| deskcenter.com | DE | 2024-06-23T16:21:46.102715+00:00 | deskcenter.com |
| ctsystem.com | TW | 2024-06-10T13:46:08.263843+00:00 | ctsystem.com |
| ctgbrands.com | US | 2024-06-10T13:45:06.497066+00:00 | ctgbrands.com |
| jmthompson.com | US | 2024-06-10T13:47:03.022229+00:00 | jmthompson.com |
| transportlaberge.com | CA | 2024-06-10T14:19:17.446978+00:00 | transportlaberge.com |
| familyguardian.com | BS | 2024-05-31T18:04:59.621283+00:00 | familyguardian.com |
| espackeuro.com | ES | 2024-05-31T18:04:10.663029+00:00 | espackeuro.com |
| schuettemetals.com | US | 2024-05-20T09:51:51.754923+00:00 | schuettemetals.com |
| dollmar.com | IT | 2024-05-31T18:05:53.239781+00:00 | dollmar.com |
| suminoe.us | US | 2024-06-19T16:45:05.570220+00:00 | suminoe.us |
| sanyo-shokai.co.jp | JP | 2024-06-10T14:17:39.040739+00:00 | sanyo-shokai.co.jp |
| saglobal.com | CA | 2024-04-22T16:35:20.166699+00:00 | saglobal.com |
| iddink.nl | NL | 2024-04-27T02:04:01.197728+00:00 | iddink.nl |
| fulcrum.pro | US | 2024-05-16T16:45:17.245453+00:00 | fulcrum.pro |
| scanda.com.mx | MX | 2024-05-13T14:29:33.824755+00:00 | scanda.com.mx |
| acfin.cl | CL | 2024-05-13T12:32:43.916749+00:00 | acfin.cl |
| xdconnects.com | NL | 2024-04-18T15:31:05.630053+00:00 | xdconnects.com |
| regencyfurniture.com | US | 2024-04-02T23:58:46.376924+00:00 | regencyfurniture.com |
| regulatormarine.com | US | 2024-04-15T19:18:57.032640+00:00 | regulatormarine.com |
| eclinicalsol.com | US | 2024-03-18T14:57:14.142735+00:00 | eclinicalsol.com |
| aerodynamicinc.com | US | 2024-04-01T13:24:46.379247+00:00 | aerodynamicinc.com |
| besttrans.com | US | 2024-04-01T13:23:49.627695+00:00 | besttrans.com |
| kelson.on.ca | CA | 2024-03-22T13:25:22.206845+00:00 | kelson.on.ca |
| drmarbys.com | US | 2024-04-17T14:33:26.206671+00:00 | drmarbys.com |
| contenderboats.com | US | 2024-03-27T08:54:56.703424+00:00 | contenderboats.com |
| newagesys.com | US | 2024-03-22T13:26:15.592371+00:00 | newagesys.com |
| abtexelgroup.com | NL | 2024-02-28T11:58:01.696638+00:00 | abtexelgroup.com |
| mcalvain.com | US | 2024-04-04T13:28:31.118505+00:00 | mcalvain.com |
| qosina.com | US | 2024-03-27T14:53:11.991835+00:00 | qosina.com |
| renypicot.es | ES | 2024-03-11T10:13:15.797059+00:00 | renypicot.es |
| grupatopex.com | PL | 2024-03-18T14:56:10.931496+00:00 | grupatopex.com |
| cleshar.co.uk | GB | 2024-03-11T10:15:14.008574+00:00 | cleshar.co.uk |
| ammega.com | NL | 2024-03-11T10:14:12.490025+00:00 | ammega.com |
| advancedprosolutions.com | US | 2024-02-20T14:36:11.052676+00:00 | advancedprosolutions.com |
| remkes.nl | NL | 2024-02-23T19:24:22.912687+00:00 | remkes.nl |
| oogp.com | US | 2024-01-27T13:10:09.076423+00:00 | oogp.com |
| jaygroup.com | US | 2024-01-26T11:51:29.902085+00:00 | jaygroup.com |
| plymouth.com | US | 2024-03-11T13:24:44.252874+00:00 | plymouth.com |
| gocco.com | ES | 2024-02-06T13:21:04.007387+00:00 | gocco.com |
| steelwarehouse.com | US | 2025-02-24T11:55:10.511241+00:00 | steelwarehouse.com |
| northernresponse.com | CA | 2025-02-06T19:26:14.876501+00:00 | northernresponse.com |
| se.com | FR | 2024-02-19T14:33:26.380290+00:00 | se.com |
| parksite.com | US | 2024-02-09T10:07:44.673958+00:00 | parksite.com |
| spbglobal.com | ES | 2024-02-06T10:19:50.025154+00:00 | spbglobal.com |
| asburyauto.com | US | 2024-01-12T14:44:04.244485+00:00 | asburyauto.com |
| acutis.com | US | 2024-01-12T05:47:48.627256+00:00 | acutis.com |
| gdi.com | CA | 2023-12-28T16:08:47.775838+00:00 | gdi.com |
| bellgroup.co.uk | GB | 2023-12-29T13:20:13.185133+00:00 | bellgroup.co.uk |
| coop.se | SE | 2023-12-29T13:19:08.788970+00:00 | coop.se |
| tridon.com.au | AU | 2023-12-29T13:17:56.146984+00:00 | tridon.com.au |
| hi-cone.com | US | 2024-01-12T05:44:58.851067+00:00 | hi-cone.com |
| dtsolutions.net | US | 2024-01-12T05:46:56.828870+00:00 | dtsolutions.net |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron