🏹 clop — Ransomware
The ransomware group known as Cl0p is a variant of a previously known strain dubbed CryptoMix. It is worth noting that this variant was delivered as the final payload in a phishing campaign in 2019 and was exclusively financially motivated, with attacks carried out by the threat actors TA505.<br> <br> At that time, malicious actors sent phishing emails that led to a macro-enabled document that would drop a loader called 'Get2.' After gaining an initial foothold in the system or infrastructure, the actors began using reconnaissance, lateral movement, and exfiltration techniques to prepare for t
Classification
Ransomware
Leak-site victims
1.3K
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (1.3K)
| Victim | Country | Published | Domain |
|---|---|---|---|
| nuv******* | 2026-08-05T21:00:53.612524+00:00 | — | |
| ipm******* | 2026-08-05T21:00:20.711630+00:00 | — | |
| ecc******* | 2026-08-05T20:59:48.465995+00:00 | — | |
| st******* | 2026-08-05T20:59:14.466837+00:00 | — | |
| qc******* | 2026-08-05T20:58:41.728809+00:00 | — | |
| flu******* | 2026-08-05T20:58:08.460370+00:00 | — | |
| mid******* | 2026-08-05T20:57:37.590696+00:00 | — | |
| itk******* | 2026-08-05T20:57:00.825813+00:00 | — | |
| G3A******* | 2026-08-05T20:56:29.913771+00:00 | — | |
| arc******* | 2026-08-05T20:55:58.667909+00:00 | — | |
| omn******* | 2026-08-05T20:55:27.272302+00:00 | — | |
| lif******* | 2026-08-05T20:54:55.196134+00:00 | — | |
| sp******* | 2026-08-05T20:54:23.648618+00:00 | — | |
| iva******* | 2026-08-05T20:53:53.076193+00:00 | — | |
| nuo******* | 2026-08-05T20:53:22.977897+00:00 | — | |
| the******* | 2026-08-05T20:52:51.427419+00:00 | — | |
| wat******* | 2026-08-05T20:52:19.834774+00:00 | — | |
| 9al******* | 2026-08-05T20:51:47.183592+00:00 | — | |
| int******* | 2026-08-05T20:51:16.886130+00:00 | — | |
| hon******* | 2026-08-05T20:50:45.458566+00:00 | — | |
| ato******* | 2026-08-05T20:50:11.638754+00:00 | — | |
| clo******* | 2026-08-05T20:49:39.582332+00:00 | — | |
| jpm******* | 2026-08-05T20:49:08.463769+00:00 | — | |
| bri******* | 2026-08-05T20:48:37.793104+00:00 | — | |
| suu******* | 2026-08-05T20:48:07.101069+00:00 | — | |
| sma******* | 2026-08-05T20:47:36.266327+00:00 | — | |
| tri******* | 2026-08-05T20:47:01.283370+00:00 | — | |
| cor******* | 2026-08-05T20:46:29.784741+00:00 | — | |
| mam******* | 2026-08-05T20:45:57.579111+00:00 | — | |
| par******* | 2026-08-05T20:45:27.004729+00:00 | — | |
| sta******* | 2026-08-05T20:44:56.033934+00:00 | — | |
| lar******* | 2026-08-05T20:44:24.742454+00:00 | — | |
| toa******* | 2026-08-05T20:43:54.060493+00:00 | — | |
| ir****** | 2026-08-05T20:43:21.379596+00:00 | — | |
| ald******* | 2026-08-05T20:42:50.739032+00:00 | — | |
| phi******* | 2026-08-05T20:42:19.813484+00:00 | — | |
| fis******* | 2026-08-05T20:41:48.638245+00:00 | — | |
| g******* | 2026-08-05T20:41:17.897590+00:00 | — | |
| sh******* | 2026-08-05T20:40:46.414796+00:00 | — | |
| net******* | 2026-08-05T20:40:15.055083+00:00 | — | |
| BLUEVISTALLC.COM | US | 2026-07-31T13:00:07.348181+00:00 | BLUEVISTALLC.COM |
| INJURYLAWYERS.COM | US | 2026-05-01T18:19:36.481569+00:00 | INJURYLAWYERS.COM |
| INTEGRALIFE.COM | US | 2026-05-01T18:19:16.075583+00:00 | INTEGRALIFE.COM |
| AIGHEALTHCARE.IN | IN | 2026-03-30T07:59:47.092937+00:00 | AIGHEALTHCARE.IN |
| CLOUD.CLEARWAYGROUP.COM | 2026-03-30T07:58:56.663916+00:00 | CLOUD.CLEARWAYGROUP.COM | |
| DAD.CO.TH | TH | 2026-02-14T10:55:58.163302+00:00 | DAD.CO.TH |
| THEMORTGAGEFIRM.COM | US | 2026-02-14T10:55:21.878217+00:00 | THEMORTGAGEFIRM.COM |
| FISHWINDOWCLEANING.COM | US | 2026-02-14T10:54:45.654361+00:00 | FISHWINDOWCLEANING.COM |
| SOLUTIONSINSAFETY.COM | 2026-02-14T10:54:09.499258+00:00 | SOLUTIONSINSAFETY.COM | |
| BOYDEN.COM | US | 2026-02-14T10:53:30.649260+00:00 | BOYDEN.COM |
| CFDT.FR | FR | 2026-02-14T10:52:54.020049+00:00 | CFDT.FR |
| SPOHNASSOCIATES.COM | US | 2026-02-14T10:52:17.980381+00:00 | SPOHNASSOCIATES.COM |
| GARNERGROUP.NET | 2026-02-14T10:51:40.888817+00:00 | GARNERGROUP.NET | |
| THEPERPETUAL.COM | US | 2026-02-14T10:51:05.419369+00:00 | THEPERPETUAL.COM |
| AIGBUSINESS.COM | 2026-02-14T10:50:30.865171+00:00 | AIGBUSINESS.COM | |
| HYDEPARKUMC.ORG | US | 2026-02-14T10:49:54.969440+00:00 | HYDEPARKUMC.ORG |
| GIACARE.COM | US | 2026-02-14T10:49:20.607509+00:00 | GIACARE.COM |
| GIASPACE.COM | US | 2026-02-14T10:48:45.544479+00:00 | GIASPACE.COM |
| ONESUPPORT.COM | US | 2026-02-14T10:48:09.594250+00:00 | ONESUPPORT.COM |
| HUDSONSUSTAINABLE.COM | US | 2026-02-14T10:47:31.906931+00:00 | HUDSONSUSTAINABLE.COM |
| GOKALLIT.COM | 2026-02-14T10:46:55.448234+00:00 | GOKALLIT.COM | |
| CHEHARDY.COM | US | 2026-02-14T10:46:18.699261+00:00 | CHEHARDY.COM |
| RBDCONSTRUCTION.COM | US | 2026-02-14T10:45:44.483880+00:00 | RBDCONSTRUCTION.COM |
| BROADREACHRETAIL.COM | US | 2026-02-14T10:45:08.827784+00:00 | BROADREACHRETAIL.COM |
| BE09.FR | FR | 2026-02-14T10:44:33.397357+00:00 | BE09.FR |
| SMITHIPSERVICES.COM | 2026-02-14T10:43:59.280846+00:00 | SMITHIPSERVICES.COM | |
| PROACTIVEMEDICAL.COM | US | 2026-02-14T10:43:22.852924+00:00 | PROACTIVEMEDICAL.COM |
| ITARCHITECHS.COM | US | 2026-02-14T10:42:46.496954+00:00 | ITARCHITECHS.COM |
| HUDSONEXECUTIVE.COM | US | 2026-02-14T10:42:11.956342+00:00 | HUDSONEXECUTIVE.COM |
| ANSTECHINC.COM | US | 2026-02-14T10:41:34.408242+00:00 | ANSTECHINC.COM |
| MNKASSOCIATES.COM | 2026-02-07T21:14:06.719824+00:00 | MNKASSOCIATES.COM | |
| VIPPLLC.COM | 2026-02-07T21:13:31.630405+00:00 | VIPPLLC.COM | |
| TRJLTD.CO.UK | GB | 2026-02-07T21:12:56.344297+00:00 | TRJLTD.CO.UK |
| STRATEGICOBJECTIVES.COM | CA | 2026-02-07T21:12:22.220121+00:00 | STRATEGICOBJECTIVES.COM |
| IDEALWELDERS.COM | CA | 2026-02-07T21:11:44.642504+00:00 | IDEALWELDERS.COM |
| CROWDEDISLAND.COM | 2026-02-07T21:11:08.025195+00:00 | CROWDEDISLAND.COM | |
| DUKOSI.COM | GB | 2026-02-07T21:10:33.217938+00:00 | DUKOSI.COM |
| CONWEST.COM | CA | 2026-02-07T21:09:55.346952+00:00 | CONWEST.COM |
| NGATTORNEYS.COM | 2026-02-07T21:09:20.089291+00:00 | NGATTORNEYS.COM | |
| LABINF.IT | IT | 2026-02-07T21:08:45.361753+00:00 | LABINF.IT |
| AUGUSTEA.COM | IT | 2026-02-07T21:08:09.024162+00:00 | AUGUSTEA.COM |
| MEDIAWORLD.COM.HK | HK | 2026-02-07T21:07:32.512119+00:00 | MEDIAWORLD.COM.HK |
| WARDHAVENCAPITAL.COM | 2026-02-07T21:06:58.373814+00:00 | WARDHAVENCAPITAL.COM | |
| LONGHORNORGANICS.COM | US | 2026-02-07T21:06:22.078039+00:00 | LONGHORNORGANICS.COM |
| DCSNORWAY.COM | NO | 2026-02-07T21:05:44.664396+00:00 | DCSNORWAY.COM |
| SHACKELFORD.LAW | 2026-02-07T21:05:09.949285+00:00 | SHACKELFORD.LAW | |
| SERVE-CLOUD.COM | 2026-02-07T21:04:33.267392+00:00 | SERVE-CLOUD.COM | |
| MARK-FINN.CO.UK | GB | 2026-02-07T21:03:57.264331+00:00 | MARK-FINN.CO.UK |
| EMEG.CO.UK | GB | 2026-02-07T21:03:19.725186+00:00 | EMEG.CO.UK |
| LOGICALMICRO.COM | GB | 2026-02-07T21:02:30.590625+00:00 | LOGICALMICRO.COM |
| HODERO HOLDINGS LTD | BM | 2026-02-07T21:01:55.604930+00:00 | — |
| NVHG.COM | US | 2026-02-07T21:01:40.306931+00:00 | NVHG.COM |
| WHEELOCKST.COM | US | 2026-02-07T21:01:03.000046+00:00 | WHEELOCKST.COM |
| DESKTOPG.COM | 2026-02-07T21:00:26.074689+00:00 | DESKTOPG.COM | |
| CMHHELI.COM | CA | 2026-02-07T20:59:44.433364+00:00 | CMHHELI.COM |
| COWANS.ORG | 2026-02-07T20:59:05.784636+00:00 | COWANS.ORG | |
| HTHELI.COM | CN | 2026-02-07T20:58:31.325955+00:00 | HTHELI.COM |
| GRANITEPOINTE.CA | CA | 2026-02-07T20:57:55.156444+00:00 | GRANITEPOINTE.CA |
| SMTLAWYERS.CA | CA | 2026-02-07T20:57:19.066926+00:00 | SMTLAWYERS.CA |
| CLOUDDATAWORKS.CA | CA | 2026-02-07T20:56:40.709713+00:00 | CLOUDDATAWORKS.CA |
| SENSIBLESOLUTIONS.CA | CA | 2026-02-07T20:56:04.092839+00:00 | SENSIBLESOLUTIONS.CA |
| KVHELI.WORDPRESS.COM | 2026-02-07T20:55:27.169292+00:00 | KVHELI.WORDPRESS.COM | |
| WHOLEIT.COM.AU | AU | 2026-02-07T20:54:51.242014+00:00 | WHOLEIT.COM.AU |
| SKYEEXCAVATIONS.COM.AU | AU | 2026-02-07T20:54:16.804367+00:00 | SKYEEXCAVATIONS.COM.AU |
| ROBERTSDESIGNS.COM.AU | AU | 2026-02-07T20:53:39.548883+00:00 | ROBERTSDESIGNS.COM.AU |
| Y-ARCHITECTURE.STUDIO | JP | 2026-02-07T20:53:00.198269+00:00 | Y-ARCHITECTURE.STUDIO |
| VENTNOR.COM.AU | AU | 2026-02-07T20:52:23.718193+00:00 | VENTNOR.COM.AU |
| RMWGROUP.COM.AU | AU | 2026-02-07T20:51:50.027795+00:00 | RMWGROUP.COM.AU |
| PODIATRYWA.COM.AU | AU | 2026-02-07T20:51:13.759594+00:00 | PODIATRYWA.COM.AU |
| MRAGROUP.COM.AU | AU | 2026-02-07T20:50:37.981213+00:00 | MRAGROUP.COM.AU |
| THEHALEROAD.COM.AU | AU | 2026-02-07T20:50:04.393459+00:00 | THEHALEROAD.COM.AU |
| ETTOAUSTRALIA.COM | AU | 2026-02-07T20:49:27.774779+00:00 | ETTOAUSTRALIA.COM |
| NEXTPHAZE.COM.AU | AU | 2026-02-07T20:48:51.892644+00:00 | NEXTPHAZE.COM.AU |
| KLMEQUITIES.COM | US | 2026-02-07T20:48:18.339164+00:00 | KLMEQUITIES.COM |
| NYASPHALT.COM | US | 2026-02-07T20:47:44.402620+00:00 | NYASPHALT.COM |
| KRIEGMANANDSMITH.COM | US | 2026-02-07T20:47:09.199403+00:00 | KRIEGMANANDSMITH.COM |
| ISLANDOUTPOST.COM | 2026-02-07T20:46:33.491677+00:00 | ISLANDOUTPOST.COM | |
| GALEINTL.COM | US | 2026-02-07T20:45:56.978298+00:00 | GALEINTL.COM |
| CENTINELA.COM.BR | BR | 2026-02-07T20:45:22.299391+00:00 | CENTINELA.COM.BR |
| MCKEEGROUP.NET | 2026-02-07T20:44:48.863458+00:00 | MCKEEGROUP.NET | |
| ESCALI.COM | US | 2026-02-07T20:44:13.500853+00:00 | ESCALI.COM |
| COBU-ARCH.COM | JP | 2026-02-07T20:43:38.060589+00:00 | COBU-ARCH.COM |
| ARKTLA.ORG | US | 2026-02-07T20:43:00.930553+00:00 | ARKTLA.ORG |
| M-B.LAW | DE | 2026-02-07T20:42:27.149106+00:00 | M-B.LAW |
| WRENLAWFIRM.COM | 2026-01-25T15:16:32.233848+00:00 | WRENLAWFIRM.COM | |
| LDHRLAW.COM | US | 2026-01-25T15:15:56.724399+00:00 | LDHRLAW.COM |
| GENESYSSPINE.COM | US | 2026-01-25T15:15:21.363005+00:00 | GENESYSSPINE.COM |
| HILTON.COM | US | 2026-01-25T15:14:45.319413+00:00 | HILTON.COM |
| WEATHER.COM | US | 2026-01-25T15:14:07.976070+00:00 | WEATHER.COM |
| WHISKIJACKRESORTS.COM | CA | 2026-01-25T15:13:31.501231+00:00 | WHISKIJACKRESORTS.COM |
| GROUPAMS.CO.UK | GB | 2026-01-25T15:12:54.332881+00:00 | GROUPAMS.CO.UK |
| RTCCOMPUTERS.COM | 2026-01-25T15:12:19.048418+00:00 | RTCCOMPUTERS.COM | |
| CCCM.BC.CA | CA | 2026-01-25T15:11:43.367789+00:00 | CCCM.BC.CA |
| TECHNIKEL.CA | CA | 2026-01-25T15:11:06.956508+00:00 | TECHNIKEL.CA |
| KAZMILAW.COM | TR | 2026-01-25T15:10:30.550322+00:00 | KAZMILAW.COM |
| WFRFIRE.COM | US | 2026-01-25T15:09:02.670733+00:00 | WFRFIRE.COM |
| VERTIGORELEASING.COM | 2026-01-25T15:08:26.081573+00:00 | VERTIGORELEASING.COM | |
| BR-ALSETH.NO | NO | 2026-01-25T15:07:48.401677+00:00 | BR-ALSETH.NO |
| 4DITSOLUTIONS.COM | 2026-01-25T15:07:13.019072+00:00 | 4DITSOLUTIONS.COM | |
| VISTA-TRAINING.COM | US | 2026-01-25T15:06:35.467129+00:00 | VISTA-TRAINING.COM |
| RSTRT.IT | IT | 2026-01-25T15:05:58.744410+00:00 | RSTRT.IT |
| WILDRIDGELANDSCAPE.COM | US | 2026-01-25T15:05:22.491343+00:00 | WILDRIDGELANDSCAPE.COM |
| MODTECH.CA | CA | 2026-01-25T15:04:45.777208+00:00 | MODTECH.CA |
| INSPYRSOLUTIONS.COM | US | 2026-01-25T15:04:10.854661+00:00 | INSPYRSOLUTIONS.COM |
| CLEARWAYGROUP.COM | HK | 2026-01-25T15:03:33.311729+00:00 | CLEARWAYGROUP.COM |
| EXCELAS1.COM | US | 2026-01-25T15:02:57.212673+00:00 | EXCELAS1.COM |
| ECA-USA.COM | US | 2026-01-25T15:02:19.025793+00:00 | ECA-USA.COM |
| WARRANTYFIRST.CO.UK | GB | 2026-01-25T15:01:43.287761+00:00 | WARRANTYFIRST.CO.UK |
| TOMLLAWYERS.COM | DE | 2026-01-25T15:01:04.314968+00:00 | TOMLLAWYERS.COM |
| INTEGROY.COM | 2026-01-25T15:00:28.574101+00:00 | INTEGROY.COM |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
🏹 Campaigns & malware
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron