🏹 cicada3301 — Ransomware
Cicada3301 is a ransomware-as-a-service group (tracked as Repellent Scorpius by Palo Alto) that emerged in mid-2024 using Rust-based ransomware targeting Windows, Linux, and ESXi systems, suspected to be a successor of BlackCat/ALPHV and running an affiliate program with 20% commissions.
Classification
Ransomware
Leak-site victims
75
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (75)
| Victim | Country | Published | Domain |
|---|---|---|---|
| CI Engineering | US | 2025-09-04T18:21:18.473216+00:00 | www.cieng.com |
| diasdeprimavera.com.br | BR | 2025-07-18T14:47:09.216665+00:00 | diasdeprimavera.com.br |
| gatlogistica.com.br | BR | 2025-07-18T14:46:15.472132+00:00 | gatlogistica.com.br |
| B&M - Expertise - Audit | FR | 2025-07-18T14:45:29.167593+00:00 | www.bmexpertise.fr |
| Burnham Nationwide | US | 2025-07-18T14:44:31.672377+00:00 | www.burnhamnationwide.com |
| Sensical | US | 2025-07-18T14:43:42.067121+00:00 | sensical.com |
| Сonasa | ES | 2025-07-15T03:14:38.496227+00:00 | ri.conasa.com |
| PACIFIC BIOLABS | US | 2025-07-11T03:13:02.239294+00:00 | pacificbiolabs.com |
| Mack Energy Corp | US | 2025-07-09T20:52:37.747811+00:00 | mec.com |
| Asesoría Bieito | ES | 2025-04-22T15:22:26.005944+00:00 | www.bieito.com |
| Natilait | TN | 2025-04-22T15:20:52.515195+00:00 | www.natilait.com.tn |
| Amazon Transportes | BR | 2025-04-22T15:19:20.693851+00:00 | www.amazontransportes.com.br |
| Správa služeb hlavního města Prahy | CZ | 2025-04-10T04:19:28.613792+00:00 | sshmp.cz |
| Eagle Distilleries | JO | 2025-04-05T23:55:17.163994+00:00 | eagledis.com |
| I.A.T.S.E. Local 667/669 | CA | 2025-03-25T16:55:00.237755+00:00 | iatse667.com |
| MinebeaMitsumi Inc | JP | 2025-03-22T22:28:17.981964+00:00 | minebeamitsumi.com |
| Benjamin Consulting Services | US | 2025-02-25T23:23:55.212838+00:00 | bcsmidwest.com |
| Executive Agenda | US | 2025-02-25T03:49:01.098705+00:00 | executiveagenda.com |
| Birdsall Muller LLC | US | 2025-02-25T03:47:31.486673+00:00 | birdsall-law.com |
| Johnson's Nursery | US | 2025-02-24T01:52:57.183392+00:00 | jniplants.com |
| Digital Technology Co., Ltd. | JP | 2025-02-23T18:59:21.886798+00:00 | dtc.co.jp |
| Goldstein Law Group, S.C. | US | 2025-02-23T18:57:52.644843+00:00 | goldsteinsc.com |
| Northern Management | US | 2025-02-23T18:56:23.235672+00:00 | wisconsinapartments.biz |
| The Northwestern Illinois Association | US | 2025-02-23T18:54:51.577584+00:00 | thenia.org |
| Substitute Teacher Service | US | 2025-02-09T04:01:35.633820+00:00 | thesubservice.com |
| SSMC | SG | 2025-02-04T01:49:13.564857+00:00 | southeasternsurveying.com |
| Asterra Properties | US | 2025-02-04T01:45:51.855688+00:00 | asterra.com |
| Caliente Construction | US | 2025-02-04T01:44:21.311357+00:00 | calienteconstruction.com |
| ISOR | FR | 2025-01-03T15:46:36.472356+00:00 | isor.fr |
| Frameworks | US | 2024-12-20T18:18:01.272321+00:00 | myframeworks.org |
| Concession Peugeot | FR | 2024-12-19T08:59:44.086210+00:00 | concessions.peugeot.fr |
| CK Technology Group | US | 2024-12-19T09:02:43.226003+00:00 | cktechnology.com |
| T-Space | GB | 2024-10-19T14:33:07.038785+00:00 | t-spacearchitects.co.uk |
| Dubin Group | US | 2024-10-18T01:47:51.429483+00:00 | dubingroup.com |
| RDC Control Ltd | GB | 2024-10-18T01:44:45.603183+00:00 | rdccontrol.com |
| Racing Forensics Inc | CA | 2024-10-18T01:41:39.980031+00:00 | racingforensics.com |
| Luxwood Software Tools | CA | 2024-10-18T01:38:31.758975+00:00 | luxwood.ca |
| Centrillion Technologies | US | 2024-10-25T02:10:07.214471+00:00 | centrilliontech.com |
| INDIBA Group | ES | 2024-10-18T20:05:08.830617+00:00 | indiba.com |
| Conductive Containers, Inc | US | 2024-10-04T03:07:21.646186+00:00 | corstat.com |
| Hughes Gill Cochrane Tinetti | US | 2024-09-24T23:06:47.141357+00:00 | hughes-gill.com |
| Crown Mortgage Company | US | 2024-09-24T16:31:21.821640+00:00 | crownmortgagecompany.com |
| Model Engineering | AE | 2024-09-24T07:05:47.066211+00:00 | designbymodel.com |
| Capital Printing | GB | 2024-09-20T18:01:16.362147+00:00 | capitalprintingco.com |
| Bogdan Frasco, LLP | US | 2024-09-24T23:08:55.426527+00:00 | bfcpas.com |
| John W. Brooker Co., CPAs | US | 2024-09-24T23:07:50.275403+00:00 | brooker-cpa.com |
| 株式会社ミヤキ | JP | 2024-09-09T05:45:42.616555+00:00 | kashima-coat.com |
| Bogdan & Frasco, LLP | US | 2024-08-31T13:09:18.402009+00:00 | bfcpas.com |
| BLVD Residential INC | CA | 2024-08-31T13:06:17.820064+00:00 | blvdresidential.com |
| John W. Brooker & Co., CPAs | US | 2024-08-31T13:03:13.939958+00:00 | brooker-cpa.com |
| Hofmann Malerei AG | CH | 2024-08-24T15:05:43.650795+00:00 | hofmann-malerei.ch |
| UFCW Local 135 | US | 2024-08-22T16:09:22.200876+00:00 | ufcw135.com |
| EBA Ernest Bland Associates | US | 2024-08-22T16:05:27.493201+00:00 | ebapc.com |
| Findel | GB | 2024-08-21T13:49:22.939724+00:00 | findel.co.uk |
| Bayou DeSiard Country Club | US | 2024-09-29T22:33:52.983207+00:00 | bayoudesiardcc.com |
| Bayou DeSiard Country Club - Monroe, LA | US | 2024-08-29T03:15:50.019176+00:00 | bayoudesiardcc.com |
| christen-sanitaer.ch | CH | 2024-08-29T03:18:56.972906+00:00 | christen-sanitaer.ch |
| Riley Pope & Laney | US | 2024-08-14T10:02:00.575223+00:00 | rplfirm.com |
| VVS-Eksperten | DK | 2024-08-12T13:58:38.207793+00:00 | vvs-eksperten.dk |
| Silipos | US | 2024-08-05T19:43:05.063232+00:00 | silipos.com |
| Square One Coating Systems | US | 2024-08-05T17:37:23.289976+00:00 | squareonecoatingsystems.com |
| Chama Gaucha | US | 2024-08-23T19:55:00.141692+00:00 | chamagaucha.com |
| Valley Bulk | US | 2024-08-02T04:14:02.877854+00:00 | valleybulkinc.com |
| D&K Group, Inc. | US | 2024-07-25T19:13:23.027679+00:00 | dkgroup.com |
| Voss Belting & Specialty | US | 2024-07-25T19:12:50.465330+00:00 | vossbelt.com |
| Tri-Star Display | SG | 2024-07-25T19:12:19.086078+00:00 | tristardisplay.com |
| Khoo and Company, Inc | SG | 2024-08-31T13:00:08.955792+00:00 | khoocpa.com |
| NARSTCO | US | 2024-07-25T19:11:45.888812+00:00 | narstco.com |
| Leech Lake Gaming | US | 2024-07-19T14:03:24.811640+00:00 | leechlakegaming.com |
| GroupePRO-B | US | 2024-07-16T23:41:27.624428+00:00 | groupepro-b.com |
| Maintel | GB | 2024-06-20T06:27:46.066367+00:00 | maintel.co.uk |
| Access Group | GB | 2024-06-20T06:26:58.834486+00:00 | theaccessgroup.com |
| Basement Systems | US | 2024-06-20T06:29:59.328925+00:00 | basementsystems.com |
| ASST Rhodense | IT | 2024-06-20T06:28:58.158886+00:00 | asst-rhodense.it |
| Rivers Casino and Rush Street Gaming | US | 2025-02-04T01:47:21.700862+00:00 | riverscasino.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron