🏹 cloak — Ransomware
Cloak is a ransomware-as-a-service operation active since late 2022, primarily targeting small-to-medium enterprises in Europe — especially Germany — across manufacturing, healthcare, education, and government sectors, with expansion into North American and Asian targets by 2025.
Classification
Ransomware
Leak-site victims
166
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (166)
| Victim | Country | Published | Domain |
|---|---|---|---|
| ra-vogeler.de | DE | 2026-06-18T20:52:54.951220+00:00 | ra-vogeler.de |
| ra-*******e | 2026-06-16T11:22:27.207590+00:00 | — | |
| d**********e | 2026-06-16T11:22:06.805368+00:00 | — | |
| W******S*******D | 2026-06-16T11:21:48.046237+00:00 | — | |
| ****el-p*****.de | DE | 2026-02-24T11:31:39.981163+00:00 | — |
| Dinnebiergruppe.de | DE | 2026-02-19T10:56:37.558053+00:00 | Dinnebiergruppe.de |
| ****ne*i***pe.de | 2026-02-03T12:38:26.182421+00:00 | — | |
| Fitzpatrickhotels.com | US | 2025-12-30T11:17:18.096092+00:00 | Fitzpatrickhotels.com |
| ****patr**h**s.com | 2025-12-19T14:13:24.202388+00:00 | — | |
| *****l*****.us | 2025-12-19T14:13:21.880989+00:00 | — | |
| Con*******.com | 2025-11-18T14:49:14.490954+00:00 | — | |
| ****e-det**.de | 2025-11-18T14:49:11.150409+00:00 | — | |
| *****.com | 2025-10-16T11:23:37.709444+00:00 | — | |
| L********den.com | 2025-10-16T11:23:34.386132+00:00 | — | |
| TuftsMedicine | US | 2025-09-07T07:11:57.423468+00:00 | tuftsmedicine.org |
| Wstg-steuerberater.de | DE | 2025-08-09T07:43:37.368202+00:00 | Wstg-steuerberater.de |
| Tu*******ne | 2025-08-09T07:43:12.480437+00:00 | — | |
| Go********l | 2025-08-09T07:43:09.961358+00:00 | — | |
| *********.bh | BH | 2025-08-09T07:43:07.531226+00:00 | — |
| *******roup.ro | RO | 2025-08-09T07:43:03.252961+00:00 | — |
| Nos********om.br | BR | 2025-07-07T14:51:49.638817+00:00 | — |
| Ws*******.de | DE | 2025-07-07T14:51:46.489551+00:00 | — |
| Pensions.gov.lk | LK | 2025-06-27T05:16:12.872215+00:00 | Pensions.gov.lk |
| Productionsaw.com | US | 2025-06-06T16:56:24.017047+00:00 | Productionsaw.com |
| **********li.com | 2025-05-06T11:41:58.681333+00:00 | — | |
| Bosshard-farben.ch | CH | 2025-04-18T14:25:31.615192+00:00 | Bosshard-farben.ch |
| Pe*************.lk | LK | 2025-04-18T14:25:24.329318+00:00 | — |
| Orl***********.com | 2025-04-18T14:25:21.325561+00:00 | — | |
| pea**********.uk | GB | 2025-04-18T14:25:18.502259+00:00 | — |
| Pc***********.org | 2025-04-18T14:25:15.539067+00:00 | — | |
| Bosshard-Farben AG | CH | 2025-04-06T08:00:17.163945+00:00 | bosshard-farben.ch |
| Oag.state.va.us | US | 2025-03-20T15:25:14.389497+00:00 | Oag.state.va.us |
| Wr-recht.de | DE | 2025-03-20T15:25:10.496734+00:00 | Wr-recht.de |
| Fi***************.pa | PA | 2025-03-20T15:24:35.133531+00:00 | — |
| St***********.nl | NL | 2025-03-20T15:24:32.306368+00:00 | — |
| ba**********.org | 2025-02-25T15:21:11.504071+00:00 | — | |
| Waggonereng.com | US | 2025-02-20T16:23:50.732010+00:00 | Waggonereng.com |
| op*********.eu | 2025-02-20T16:23:20.033361+00:00 | — | |
| wr********.de | DE | 2025-02-20T16:23:17.880210+00:00 | — |
| pen********.de | DE | 2025-02-20T16:23:15.762192+00:00 | — |
| oa*************.us | US | 2025-02-20T16:23:13.661666+00:00 | — |
| Baltimorecityschools | US | 2025-03-20T15:24:42.862926+00:00 | baltimorecityschools.org |
| Ad***********.ca | CA | 2025-02-03T15:19:43.864103+00:00 | — |
| Centromedicoenova | ES | 2025-01-30T19:01:43.271002+00:00 | centromedicoenova.com |
| Premierautocredit.com | US | 2025-01-29T19:28:32.085214+00:00 | Premierautocredit.com |
| Kaisersbach.de | DE | 2025-01-28T15:17:20.985017+00:00 | Kaisersbach.de |
| Neovita.de | DE | 2025-01-28T15:16:17.725754+00:00 | Neovita.de |
| Bwfg.at | AT | 2025-01-23T18:39:42.704073+00:00 | Bwfg.at |
| pre*************.com | 2025-01-21T16:28:15.839561+00:00 | — | |
| Wa**********.com | 2025-01-21T16:28:13.744723+00:00 | — | |
| ge*******.com | 2025-01-21T16:28:11.687665+00:00 | — | |
| Mai***********.de | DE | 2024-12-30T21:42:08.109065+00:00 | — |
| bac***********.com.au | AU | 2024-12-30T21:42:05.951777+00:00 | — |
| Town of Ponoka | CA | 2024-12-30T21:42:04.163925+00:00 | Ponoka.ca |
| Kai*************.de | DE | 2024-12-20T06:11:27.899596+00:00 | — |
| Ne***********.de | DE | 2024-12-20T06:11:25.755444+00:00 | — |
| Fmp.gob.pe | PE | 2024-12-20T06:11:23.566338+00:00 | Fmp.gob.pe |
| N************.uk | GB | 2024-12-10T22:28:12.829999+00:00 | N************.uk |
| Ukh-hof.de | DE | 2024-12-10T22:28:12.829999+00:00 | ukh-hof.de |
| Donnewalddistributing | US | 2024-12-05T09:14:39.568293+00:00 | donnewalddistributing.com |
| Bw**********.at | AT | 2024-11-30T19:41:50.725768+00:00 | — |
| Ma************.de | DE | 2024-11-30T19:41:50.725768+00:00 | — |
| Or*************.de | DE | 2024-11-30T19:41:50.725768+00:00 | — |
| Uk***********.de | DE | 2024-11-30T19:41:50.725768+00:00 | — |
| Orthopaedie-hof.de | DE | 2024-12-10T22:28:12.829999+00:00 | orthopaedie-hof.de |
| Globalresultspr.com | US | 2024-11-30T19:41:50.725768+00:00 | globalresultspr.com |
| don****************.com | US | 2024-11-30T19:41:50.725768+00:00 | — |
| F************.pe | PE | 2024-11-30T19:41:50.725768+00:00 | — |
| SCAFF'HOLDING | FR | 2024-11-30T19:41:50.725768+00:00 | equistonepe.fr |
| Glo**************.com | 2024-11-30T19:41:50.725768+00:00 | — | |
| o******************v | 2024-11-30T19:41:50.725768+00:00 | — | |
| mm********.com | IE | 2024-10-22T19:51:07.065858+00:00 | — |
| Ful************.com | US | 2024-09-26T18:56:16.574728+00:00 | — |
| Te***************.net | IT | 2024-09-26T18:56:13.927359+00:00 | — |
| Pennvet.com | US | 2024-09-25T13:26:58.048114+00:00 | Pennvet.com |
| Wertachkliniken.de | DE | 2024-09-19T20:03:03.975986+00:00 | Wertachkliniken.de |
| Pen*****************.com | US | 2024-09-03T20:02:46.938309+00:00 | — |
| El**********.hu | US | 2024-09-03T20:02:44.913280+00:00 | — |
| we****************.de | DE | 2024-09-03T20:02:42.643070+00:00 | — |
| Stjamesplace.org | US | 2024-08-23T06:53:01.200808+00:00 | Stjamesplace.org |
| Vibo.dk | DK | 2024-08-21T17:46:48.322901+00:00 | Vibo.dk |
| Hvb-ingenieure.de | DE | 2024-08-21T17:44:45.702685+00:00 | Hvb-ingenieure.de |
| Westermans.com | GB | 2024-08-21T17:42:42.916073+00:00 | Westermans.com |
| Entr**************.fr | FR | 2024-08-14T16:29:06.738671+00:00 | — |
| Cb**********.com | CY | 2024-08-14T16:29:03.961114+00:00 | — |
| St**************.org | US | 2024-08-05T17:47:28.219629+00:00 | — |
| Dd*******uk | GB | 2024-08-01T08:05:51.774024+00:00 | — |
| Kalaswire.com | US | 2024-07-27T08:40:23.493157+00:00 | kalaswire.com |
| Hv*************.de | DE | 2024-07-22T08:50:53.105775+00:00 | — |
| We*******.com | GB | 2024-07-22T08:50:50.622648+00:00 | — |
| Ka******.com | US | 2024-07-22T08:50:47.924517+00:00 | — |
| upcli.com | US | 2024-07-15T12:00:45.736248+00:00 | upcli.com |
| Vi*********.dk | DK | 2024-07-15T12:00:42.709585+00:00 | — |
| Abileneisd.org | US | 2024-07-04T14:21:50.455300+00:00 | abileneisd.org |
| Dun*****************uk | GB | 2024-07-04T14:21:47.466023+00:00 | Dun*****************uk |
| P********.pl | PL | 2024-06-30T18:19:10.413616+00:00 | — |
| Unit*****************.com | US | 2024-06-30T18:19:08.022177+00:00 | — |
| Dunlop Aircraft Tyres | GB | 2024-08-21T17:46:50.767884+00:00 | dunlopaircrafttyres.com |
| Longviewbridge.com | US | 2024-06-27T09:00:32.104064+00:00 | longviewbridge.com |
| Ruland-viersen.de | DE | 2024-06-27T09:00:29.708427+00:00 | ruland-viersen.de |
| Mundocar.eu | ES | 2024-06-14T07:01:37.529351+00:00 | mundocar.eu |
| ab*******.org | US | 2024-06-14T07:01:34.431898+00:00 | — |
| lo***********.com | US | 2024-06-07T08:37:34.641747+00:00 | — |
| Rul**********.de | DE | 2024-05-21T06:04:08.441801+00:00 | — |
| Baeckerei-raddatz.de | DE | 2024-05-16T14:15:02.425560+00:00 | baeckerei-raddatz.de |
| cli*********.com | CO | 2024-05-04T08:47:54.442098+00:00 | — |
| bae************.de | DE | 2024-05-04T08:47:52.542919+00:00 | — |
| B*****.hu | HU | 2024-04-29T07:06:56.806150+00:00 | b*****.hu |
| Ce***.com | CH | 2024-04-27T10:30:05.388996+00:00 | ce***.com |
| Sev********.com | US | 2024-04-14T16:28:05.597019+00:00 | sev********.com |
| Wencor.com | US | 2024-04-11T20:23:58.519300+00:00 | wencor.com |
| Theharriscenter.org | US | 2024-04-11T20:23:52.960671+00:00 | theharriscenter.org |
| Speditionweise.de | DE | 2024-04-08T08:34:46.039951+00:00 | speditionweise.de |
| Mu*****.eu | ES | 2024-04-08T08:34:40.623439+00:00 | — |
| Cv*****.com | GB | 2024-04-08T08:34:35.234489+00:00 | cv*****.com |
| Gascontec.com | DE | 2024-03-24T13:52:10.280682+00:00 | gascontec.com |
| Equatorial Energia | BR | 2024-03-24T13:52:04.758680+00:00 | equatorialenergia.com.br |
| ****************** | 2024-03-18T21:03:21.585868+00:00 | — | |
| Hu********.ca | CA | 2024-03-12T13:31:57.805144+00:00 | — |
| Ponoka.ca | CA | 2024-03-03T08:43:22.487569+00:00 | ponoka.ca |
| suffolkva.us | US | 2026-02-24T11:32:05.820139+00:00 | suffolkva.us |
| Po****.ca | CA | 2024-02-23T15:25:55.539571+00:00 | — |
| we****.com | US | 2024-02-20T23:21:03.699696+00:00 | — |
| The************.org | US | 2024-02-20T23:20:58.580792+00:00 | — |
| Sped**********.de | DE | 2024-02-20T23:20:53.261922+00:00 | — |
| Forgepresion.com | US | 2024-02-12T18:54:24.181112+00:00 | forgepresion.com |
| bv*********.com | US | 2024-02-12T18:54:18.250012+00:00 | bv*********.com |
| ga*******.com | DE | 2024-02-12T18:54:12.971717+00:00 | — |
| vh********en.de | DE | 2024-02-01T23:09:50.190117+00:00 | — |
| Vhs-vaterstetten.de | DE | 2024-03-24T13:52:15.485215+00:00 | vhs-vaterstetten.de |
| For**********.com | US | 2024-01-24T16:12:45.163309+00:00 | — |
| Maas911.com | US | 2024-01-06T13:52:26.826214+00:00 | maas911.com |
| M********org | US | 2023-12-27T12:50:18.990845+00:00 | — |
| Ma******.com | US | 2023-12-27T12:50:16.983940+00:00 | — |
| Ga***********.com | US | 2023-12-08T13:30:18.278084+00:00 | — |
| Gaido-fintzen.com | US | 2023-12-13T23:25:20.853168+00:00 | gaido-fintzen.com |
| farwickgrote.de | DE | 2023-12-01T13:20:15.069237+00:00 | farwickgrote.de |
| skncustoms.com | KN | 2023-12-01T13:20:13.199708+00:00 | skncustoms.com |
| euro2000-spa.it | IT | 2023-12-01T13:20:11.286384+00:00 | euro2000-spa.it |
| Thenewtrongroup.com | US | 2023-12-01T13:20:09.349060+00:00 | thenewtrongroup.com |
| Bankofceylon.co.uk | GB | 2023-12-01T13:20:07.460627+00:00 | bankofceylon.co.uk |
| carranza.on.ca | CA | 2023-12-01T13:20:05.477715+00:00 | carranza.on.ca |
| Arus-gmbh | DE | 2023-08-24T07:42:45.735883+00:00 | — |
| Sportlab-srl | 2023-08-24T07:42:41.850574+00:00 | — | |
| BONI-PASSAU.DE | DE | 2023-08-24T07:42:37.742910+00:00 | boni-passau.de |
| lusis-avocats.com | FR | 2023-08-24T07:42:34.271106+00:00 | lusis-avocats.com |
| werk33.com | DE | 2023-08-24T07:42:30.667086+00:00 | werk33.com |
| GRIDINSTALLERS.com | 2023-08-24T07:42:26.994545+00:00 | gridinstallers.com | |
| surapon.com | TH | 2023-08-24T07:42:23.109057+00:00 | surapon.com |
| mps-24.com | DE | 2023-08-24T07:42:19.573697+00:00 | mps-24.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron