Ransomware_Official_Domains

hxxp[:]//lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd[.]onion
lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad[.]onion
BLOG lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad[.]onion
PANEL AUTO REG lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad[.]onion
TOX 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D14E41080A105
PUBLIC PGP KEY lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion/pgp[.]txt

hxxp[:]//lockbit[.]org/

Play

http://k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion/
http://ipi4tiumgzjsym6pyuzrfqrtwskokxokqannmd6sa24shvr7x5kxdvqd.onion
http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion \

hunters

https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion
https://huntersinternational.net

Ransomware group Hunters International announces shutdown:

Project Closure and Free Decryption Software for Affected Companies We, at Hunters International, wish to inform you of a significant decision regarding our operations. After careful consideration and in light of recent developments, we have decided to close the Hunters International project. This decision was not made lightly, and we recognize the impact it has on the organizations we have interacted with.

As a gesture of goodwill and to assist those affected by our previous activities, we are offering free decryption software to all companies that have been impacted by our ransomware. Our goal is to ensure that you can recover your encrypted data without the burden of paying ransoms.

We understand the challenges that ransomware attacks pose, and we hope that this initiative will help you regain access to your critical information swiftly and > > efficiently. To access the decryption tools and receive guidance on the recovery process, please visit our official website.

We appreciate your understanding and cooperation during this transition. Our commitment to supporting affected organizations remains our priority as we conclude > > our operations.

kill security (KillSec)

kill432ltnkqvaqntbalnsgojqqs2wz4lhnamrqjg66tq6fuvcztilyd[.]onion
ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id[.]onion - New blog
ID: 9453686EAB63923D1C35C92DDE5E61A6534DD067B5448C1C8D996A460B92CA5055C1AB0FCD22
session:05cb94c52170c8119f7ebc2d8afc94b9746bc7c361d91c49e7d18e96e266582a07
hxxps[:]//t[.]me/k1llsec

RA

http://raworldw32b2qxevn3gp63pvibgixr4v75z62etlptg3u3pmajwra4ad.onion

snatch

https://snatchteam.cc/ - An error occurred during a connection to snatchteam.cc.

Red Ransomware Group

http://33zo6hifw4usofzdnz74fm2zmhd3zsknog5jboqdgblcbwrmpcqzzbid.onion - onion site is offline

Qilin

NEW

http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/
jabber: qilin@exploit.im
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
ftp[:]//dataShare[:]nX4aJxu3rYUMiLjCMtuJYTKS@176[.]113[.]115[.]97
ftp[:]//dataShare[:]2bTWYKNn7aK7Rqp9mnv3@176[.]113[.]115[.]209
WikiLeaksV2 - hxxps:[//]31[.]41[.]244[.]100/
Qilin interview in WikiLeaksV2 -https[:]//31[.]41[.]244[.]100/Qilin-RaaS
User: Haise
hxxps[:]//wikileaks2[.]xyz (user: Wikileaksv2, TOX: A0345D760F8068EB32F55DF6491A8D417B7CC0A355FEAAA63945B701324B603AD1A0416F390C)

OLD

http://kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion/
jabber: qilin@exploit.im
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
ftp[:]//dataShare:nX4aJxu3rYUMiLjCMtuJYTKS@85[.]209[.]11[.]49
ftp[:]//dataShare[:]2bTWYKNn7aK7Rqp9mnv3@188[.]119[.]66[.]189

Medusa

hxxp[:]//xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd[.]onion/
hxxp[:]//7aqabivkwmpvjkyefonf3gpy5gsubopqni7kcirsrq3pflckxq5zz4id[.]onion/
hxxp[:]//kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd[.]onion/ - Offline
hxxp[:]//s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad[.]onion/ - Offline
hxxp[:]//cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd[.]onion/ - Offline
hxxp[:]//hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd[.]onion/ - Offline
hxxp[:]//62foekhv5humjrfwjdyd2dgextpbf5i7obguhwvfoghmu3nxpkmxlcid[.]onion/ - Offline
hxxps[:]//t[.]me/+lyskiDn9KiYxZjlh
TOX: AEA72DFCF492037A6D15755A74645C7D8E674E342BACA9F9070A3FB74117EC3143FD6E29BEAC
TOX: 6E8CDBCFFCC204358615563A3C2325E08DE03B785F6A85D783DE6E43AF246430142D9CBD4664

Updated

hxxp[:]//xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd[.]onion
hxxp[:]//7aqabivkwmpvjkyefonf3gpy5gsubopqni7kcirsrq3pflckxq5zz4id[.]onion \

8BASE

http://xb6q2aggycmlcrjtbjendcnnwpmmwbosqaugxsqb4nx6cmod3emy7sad.onion/ - onion site is offline http://xfycpauc22t5jsmfjcaz2oydrrrfy75zuk6chr32664bsscq4fgyaaqd.onion/

INC Ransom

http://incblog.su/blog/disclosures http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/

RansomEXX

http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion

cactus

https://cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion
http://sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion/contact/Cactus_Support

Black Suit

http://weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion

Rhysida

http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
Email: rhysida@onionmail.org
rhysidacrypting@onionmail.org

CiphBit

http://ciphbitqyg26jor7eeo6xieyq7reouctefrompp6ogvhqjba7uo4xdid.onion

Dragonforce

http://3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/news Tox: 1C054B722BCBF41A918EF3C485712742088F5C3E81B2FDD91ADEA6BA55F4A856D90A65E99D20 FS: http://dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion/

hxxp[:]//dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd[.]onion/registration DBKPVG2A5PJEIFCCJRCAO2R2WRX75NJXL3O67U2W5DPCQIMAYJMA

Donutleaks

http://dk4mkfzqai6ure62oukzgtypedmwlfq57yj2fube7j5wsoi6tuia7nyd.onion/

DarkVault

http://mdhby62yvvg6sd5jmx5gsyucs7ynb5j45lvvdh4dsymg43puitu7tfid.onion Keybase : darkvault

Mallox

http://wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onion/

DAIXIN

http://232fwh5cea3ub6qguz3pynijxfzl2uj3c73nbrayipf3gq25vtq2r4qd.onion/ http://7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu76zzv3jvitlqd.onion/

DAIXIN Additional Info:

https://www.aha.org/system/files/media/file/2022/10/joint-cybersecurity-advisory-tlp-white-stop-ransomware-daixin-team-10-21-22.pdf

MalekTeam

http://195.14.123.2/
https://t.me/malekteam_6

Dunghill Leak

http://p66slxmtum2ox4jpayco6ai3qfehd5urgrs4oximjzklxcol264driqd.onion/index.html http://nsalewdnfclsowcal6kn5csm4ryqmfpijznxwictukhrgvz2vbmjjjyd.onion/
https://t.me/leaksdirectory

Blackout

http://black3gnkizshuynieigw6ejgpblb53mpasftzd6pydqpmq2vn2xf6yd.onion

mydata

http://mydatae2d63il5oaxxangwnid5loq2qmtsol2ozr6vtb7yfm5ypzo6id.onion/blog

HelloGookie

http://gookie256cvccntvenyxrvn7ht73bs6ss3oj2ocfkjt5y6vq6gfi2tad.onion/

APT73 / BASHE

http://bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion/
http://basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion/
http://fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion/
http://qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onion/
http://wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion/
Telegram: @bashe_administration
TOX messenger: BASHE
ID - 9796CE1E72A8874D594F6573F44C94FB649473B4194DCD80C406BFE88E4B3662A375E78FB436
X: @bashe_team
EMAIL: bashe.team@onionmail.org

Qiulong

http://62brsjf2w77ihz5paods33cdgqnon54gjns5nmag3hmqv6fcwamtkmad.onion/

Embargo

http://embargobe3n5okxyzqphpmk3moinoap2snz5k6765mvtkk7hhi544jid.onion
TOXID: 9500B1A73716BCF40745086F7184A33EA0141B7D3F852431C8FDD2E1E8FAF9277E9FDC117B47

RansomHouse

http://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion/
https://t.me/RHouseNews
https://twitter.com/RHouseNews

Everest

http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/
email:everestblog@cock.li
jabber:
everestgrp @ exploit.im
everestgrp @ thesecure.biz

dAn0n Hacker Group

http://2c7nd54guzi6xhjyqrj5kdkrq2ngm2u3e6oy4nfhn3wm3r54ul2utiqd.onion/

Ransomware blog

http://z6wkgghtoawog5noty5nxulmmt2zs7c3yvwr22v4czbffdoly2kl4uad.onion/

Underground

http://47glxkuxyayqrvugfumgsblrdagvrah7gttfscgzn56eyss5wg3uvmqd.onion/
https://t.me/UndergroundDataLeaks

Fsociety | Flocker

http://flock4cvoeqm4c62gyohvmncx6ck2e7ugvyqgyxqtrumklhd5ptwzpqd.onion/ - Onion site not found
TOX ID: 28F633BF7F6E7E5E97726FF65F0A268F219468A35EA14B00F2A728CE66D54D348012BA360C42
SESSION MESSENGER ID: 0550f649ecc61c797b802f3b9e3ca079dfadf64d3c81d0c0da94f9640dde727853

Metaencryptor team

https://metacrptmytukkj7ajwjovdpjqzd7esg5v3sg344uzhigagpezcqlpyd.onion/

Cloak

http://cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion/

Spice Bears

http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion

Zero Tolerance

http://zhuobnfsddn2myfxxdqtpxk367dqnntjf3kq7mrzdgienfxjyllq4rqd.onion/

MONTI

http://mblogci3rudehaagbryjznltdp33ojwzkq6hn2pckvjq33rycmzczpid.onion/

Arcus

http://arcuufpr5xxbbkin4mlidt7itmr6znlppk63jbtkeguuhszmc5g7qdyd.onion/
TOX : F6B2E01CFA4D3F2DB75E4EDD07EC28BF793E541A9674C3E6A66E1CDA9D931A1344E321FD2582
XMPP : AlexanderPushkin@exploit.im

Money Message

http://blogvl7tjyjvsfthobttze52w36wwiz34hrfcmorgvdzb6hikucb7aqd.onion

Meow

http://meow6xanhzfci2gbkn3lmbqq7xjjufskkdfocqdngt3ltvzgqpsg5mid.onion/

Cl0p

http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/
Contact Emails:
unlock@he1p-me.com
unlock@cl-leaks.com
support@he1p-center.com

SenSayQ

http://gmixcebhni6c3kcf5m7xxybomaphj7pizoqtxiqmrz5wsh6g6x5s2wqd.onion/

El Dorado / Blacklock

NEW hxxp[:]//zdkexsh2e7yihw5uhg5hpsgq3dois2m5je7lzfagij2y6iw5ptl35gyd[.]onion
Session :0532b290d16a48f8f81dc1a41c0840145aede477af674c56e6599507aa7f27933c
Telegram: @GlobalBlackLock

OLD http://dataleakypypu7uwblm5kttv726l3iripago6p336xjnbstkjwrlnlid.onion
MAIL:blacklock@cyberfear.com
CHAT:https://qtox.github.io/
qTox ID: 667798F921A68529C74094664C1B890D4E1156C4588906071398FA4F76C2095C0BF34A4C5D9C

cicada3301

http://cicadabv7vicyvgz5khl7v2x5yygcgow7ryy6yppwmxii4eoobdaztqd.onion/

Vanir Group

http://6xdpj3sb5kekvq5ulym5qqmzsv6ektjgvpmajns3qrafgxtyxrhokfqd.onion/
THIS HIDDEN SITE HAS BEEN SEIZED

pryx

http://c2mdhim6btaiyae3xqthnxsz64brvdxsnbty4tvos65zb565y4v55iid.onion/b/

FOG

http://xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion/

Helldown

http://onyxcgfg4pjevvp5h34zvhaj45kbft3dg5r33j5vu3nyp7xic3vrzvad.onion/
Contact: (qtox.github.io)
Tox id:19A549A57160F384CF4E36EE1A24747ED99C623C48EA545F343296FB7092795D00875C94151E \

MadLiberator

http://k67ivvik3dikqi4gy4ua7xa6idijl4si7k5ad5lotbaeirfcsx4sgbid.onion/

Trinity

http://txtggyng5euqkyzl2knbejwpm4rlq575jn2egqldu27osbqytrj6ruyd.onion/

Lynx

http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid.onion/ http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad.onion/

Orca

http://orca66hwnpciepupe5626k2ib6dds6zizjwuuashz67usjps2wehz4id.onion/

Brain cypher

http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/
E-mail: brain.support@cyberfear.com

Nitrogen

http://nitrogenczslprh3xyw6lh5xyjvmsz7ciljoqxxknd7uymkfetfhgvqd.onion
TOX: 620C7A54EC212FB482A684BA74381C3623CCE4D0E27FAE348688F65E0F0F6B6A149790D1AE7D
X: @NitrogenSupp

Sarcoma

http://sarcomawmawlhov7o5mdhz4eszxxlkyaoiyiy2b5iwxnds2dmb4jakad.onion/
Mail: SarcomaGroup@onionmail.org

Interlock

hxxp[:]//ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid[.]onion
Email: interlock@2mail[.]co New email: inbox.interlock[@]2mail[.]co

PlayBoy

http://vlofmq2u3f5amxmnblvxaghy73aedwta74fyceywr6eeguw3cn6h6uad.onion - onion site is offline

HellCat

New HellCat

hxxp[:]//hellcatdcy653ma43t2ryf2ztw5yfanqsbfmapndbqvteh5itctoijyd[.]onion
hxxp[:]//hellcatdnrsu4i5uctbklunpfyv2ppiioh5sb3leu4dfgizinrve3gqd[.]onion
hxxp[:]//hellcatdohzngkuh7zruzhi2wojrawbnzbyzljtkw6iluv5ussfer4id[.]onion
hxxp[:]//hellcatdue7rasyoi4oh6t3fhra5bpcj5t6xmrm4vjicfqdvrl24ijid[.]onion \

Old Hellcat

http://hellcakbszllztlyqbjzwcbdhfrodx55wq77kmftp4bhnhsnn5r3odad.onion/
http://hcatxn4ppkgmakaatrq6bsbhqk5ouhviygyx57gljjt5iseul5nvpayd.onion
TOX: 898923FE0699CFE1EFD17773425DECB080840877C29F883D389D6880B2B961737FACE98E82E4
Telegram: @HCSupp
XMPP: hellcat@5222.de

Apos Security

http://yrz6bayqwhleymbeviter7ejccxm64sv2ppgqgderzgdhutozcbbhpqd.onion/blog
TOX: E6DE9A810847293EC993A6FFCF615F43178489048D2974C215B2D1BAEED3A950432030DA3572

Termite

http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion

Chort

http://hgxyonufefcglpekxma55fttev3lcfucrf7jvep2c3j6447cjroadead.onion
Telegram Channel @ChortGroup

Safepay

http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion/
Email : VanessaCooke94@protonmail.com

kairos

http://nerqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion
Contact: kairossup@onionmail.com

Argonauts

http://jbmk7h6xlkedn2gg5yi76zca6y3jgdlp5wchlsrd7735tlnrmmvqe5ad.onion/

Funksec

funksec53xh7j5t6ysgwnaidj5vkh3aqajanplix533kwxdz3qrwugid.onion
funksecsekgasgjqlzzkmcnutrrrafavpszijoilbd6z3dkbzvqu43id.onion
funksecsekgasgjqlzzkmcnutrrrafavpszijoilbd6z3dkbzvqu43id.onion \

http://funkxxkovrk7ctnggbjnthdajav4ggex53k6m2x3esjwlxrkb3qiztid.onion/
funknqn44slwmgwgnewne6bintbooauwkaupik4yrlgtycew3ergraid.onion
funkiydk7c6j3vvck5zk2giml2u746fa5irwalw2kjem6tvofji7rwid.onion
https://github.com/funksec-CM
Get Session: 0538d726ae3cc264c1bd8e66c6c6fa366a3dfc589567944170001e6fdbea9efb3d
Get twitter: https://x.com/FunksecCM - Offline
funksecfr@onionmail.org
http://funkhnsbaxojjjju65bhc7xuidjwvmwhdmgarvhbhs3szqkpzkmvnvid.onion - auctions marketplace in tor netwrok
http://funk4ph7igelwpgadmus4n4moyhh22cib723hllneen7g2qkklml4sqd.onion/ - Forum

http://7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion - onion site is offline
http://pke2vht5jdeninupk7i2thcfvxegsue6oraswpka35breuj7xxz2erid.onion - onion site is offline
Get Session: 0538d726ae3cc264c1bd8e66c6c6fa366a3dfc589567944170001e6fdbea9efb3d

bluebox

http://zu3wfrmrkl4ltqqnpt3owp3cwa33rqwod4gpe3ttb5o4vf2is2gzm6qd.onion/

Beast

hxxp[:]//beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd[.]onion
hxxp[:]//ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad[.]onion
Jabber: mnstr@exploit.im
TOX: 92E5D1A8ECFC69E7967E7A9DC1C9A735CD8DCE965D12EF01F19966C7101EAF071B4CDEA310E9

Anubis

anubisyfkh5rixydjpoo3jqucauajz2juybrbtuglcppjj2y3eg3y6ad[.]onion
om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd[.]onion
X (Twitter) : hxxps[:]//x[.]com/Anubis__media
XSS.is : hxxps[:]//xss[.]is/members/400498/

MORPHEUS

http://izsp6ipui4ctgxfugbgtu65kzefrucltyfpbxplmfybl5swiadpljmyd.onion/
mopheus@onionmail.org

http://izsp6ipui4ctgxfugbgtu65kzefrucltyfpbxplmfybl5swiadpljmyd.onion/

SKIRA TEAM

http://mtgc3qvyedjnfu7cen2zsupdppi5ys5g2hm6xwujvoepw25p4dy6huid.onion/ Session: ID: 05172c3981b0053c3798a740aa875b9a4b41844e22b6124e92d6dbde387f454e41

SECP0 Team

http://secponewsxgrlnirowclps2kllzaotaf5w2bsvktdnz4qhjr2jnwvvyd.onion/

oxthiefs

http://oxthiefsvzp3qifmkrpwcllwscyu7jvmdxmd2coz2rxpem6ohut6x5qd.onion/

Babuk Locker 2.0

http://bxwu33iefqfc3rxigynn3ghvq4gdw3gxgxna5m4aa3o4vscdeeqhiqad.onion

Night Spire

http://nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion
night.spire.team@gmail.com
night.spire.team@proton.me
@night_spire_team
night.spire.team@onionmail.org

Mamona

http://owt3kwkxod2pvxlv3uljzskfhebhrhoedrh5gqrxyyd6rrco4frzj5ad.onion/

Van Helsing

vanhelqmjstkvlhrjwzgjzpq422iku6wlggiz5y5r3rmfdeiaj3ljaid.onion
vanhelvuuo4k3xsiq626zkqvp6kobc2abry5wowxqysibmqs5yjh4uqd.onion
vanhelxjo52qr2ixcmtjayqqrcodkuh36n7uq7q7xj23ggotyr3y72yd.onion
vanhelsokskrlaacilyfmtuqqa5haikubsjaokw47f3pt3uoivh6cgad.onion
Sample: 86d812544f8e250f1b52a4372aaab87565928d364471d115d669a8cc7ec50e17

Kraken leak blog (hellokitty)

http://krakenccj3wr23452a4ibkbkuph4d6soyx2xgjoogtuamc3m7u7wemad.onion/

Arkana Security (Аркана Секьюрити)

arkanabb66ee4nsdji6la2bu6bwqe3dbtsyf3rxrv6vhiehod7utagad.onion
Contact:
sonar: http://sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion/contact/Arkana
session: getsession.org 05babe48a5070de46a39ee4aa025988beefe059dad57babe52ba797b85643f4523
mirror: torproject.org ransomwvbabemdnwl7lzgeenyfmmhskaed6jcruwhkvapsia76vttzyd.onion

weyhro

http://weyhro27ruifvuqkk3hxzcrtxv2lsalntxgkv6q2j3znkhdqudz54rqd.onion
TOX: 6CD290BA0876417B649DEA72CCD9E4052E40B53178521F1DB8844A29E6180F0AED874C9155C1

frag

http://34o4m3f26ucyeddzpf53bksy76wd737nf2fytslovwd3viac3by5chad.onion frag-blog@tutamail.com frag-blog@proton.me

RALord

http://ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion/
qTOX: 8E9A6195A769FE7115F087C61D75CF32874C339B3AB0947D07480C9A8A12DA5009151BE6A51F
session: 054f55ec93aca9bac362b9d91eff36a7ce451e7caba47c0b2e004ba429f9529c79

GLOBAL

NEW globalco44t2yl6ltgj74cwthr6b6olggl3srg7engqfhx72f6ni3cyd[.]onion/
globaldonejcrwbe7ujwuzptsummx3rvba54wcjoxrjvqgo37y4aqwid[.]onion/
globalrbweyhxxa5b65bjjsm5bfuqfs5ydizefupqcminoedzn6o2sqd[.]onion/
globalco44t2yl6ltgj74cwthr6b6olggl3srg7engqfhx72f6ni3cyd[.]onion/

OLD hxxp[:]//vg6xwkmfyirv3l6qtqus7jykcuvgx6imegb73hqny2avxccnmqt5m2id[.]onion/
session: 0532b290d16a48f8f81dc1a41c0840145aede477af674c56e6599507aa7f27933c
Sample: SHA-256 a8c28bd6f0f1fe6a9b880400853fc86e46d87b69565ef15d8ab757979cd2cc73

CHAOS

Registration: hxxp[:]//cdgi6zjox6zr5epk7k5rg673qduxy7dlkk7ws3n4vusspr5bmhx24aqd[.]onion
Blog: hxxp[:]//hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd[.]onion
Support1: BFC836EBAE06450FDD36B63170F121F44ADADFF2DAFAAFA41314B6778F6003501B0799F013FA
Win88[@]thesecure[.]biz
Support2: EC99BD5A36DE69144F5402C832B5413295323FC7C12259C53E4AA6D5BC2D4E6DA44C537F9FEC

RTM Team

hxxp[:]//nv4addu4insb7x6aagdv6r5gvxzczgfje7mmecsjonnrvsq7ulevvfid[.]onion
TOX: A0FE105A82525ECB94DD2977B4A1F8A5A7CF82F12D720DD8C8D9CCA3F98B6F52D911126AC1DF

NOVA

hxxp[:]//novatd4577pzlvdyy42slydhrhru7fpcflbbxlajcmbfrgzyeis6d3id[.]onion
hxxp[:]//novag4k2te3mstt2xq5irywlpaw6edgkpiwgg4t2q7eecisj2qqtvbid[.]onion
hxxp[:]//novaoddh3vxylxqpsfdjprliknbzgbkv6nkazpzu3cvykrgpyzuywryd[.]onion
Affiliate page: hxxp[:]//novatd4577pzlvdyy42slydhrhru7fpcflbbxlajcmbfrgzyeis6d3id[.]onion/Nova-Affiliate
hxxp[:]//novavdivko2zvtrvtllnq45lxhba2rfzp76qigb4nrliklem5au7czqd.onion
hxxp[:]//novaxtychr6ohlc4zr5its73p6i7unpuhpwoodtzrg2y4w4seytatlid[.]onion

New NOVA BLOG

Session: 054f55ec93aca9bac362b9d91eff36a7ce451e7caba47c0b2e004ba429f9529c79
Qtox: 8E9A6195A769FE7115F087C61D75CF32874C339B3AB0947D07480C9A8A12DA5009151BE6A51F
Blog : hxxp[:]//novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd[.]onion/
Department of Support : hxxp[:]//novak6fgohb7m6nm52lgpaaquntawixqsnpcptomwaiiz4mfydztatqd[.]onion/
AI-Assist (questions section) : hxxp[:]//novaf2pxzvb7xzkunlctqfuifatnp6pnhctvrqakizqflzr3rvqbnqid[.]onion/

sinobi

hxxp[:]//sinobi6ftrg27d6g4sjdt65malds6cfptlnjyw52rskakqjda6uvb7yd[.]onion/leaks
hxxp[:]//sinobi6rlec6f2bgn6rd72xo7hvds4a5ajiu2if4oub2sut7fg3gomqd[.]onion/leaks \

DEVMAN 2.0

hxxp[:]//wugurgyscp5rxpihef5vl6b6m5ont3b6sezhl7boboso2enib2k3q6qd[.]onion/
9D97F166730F865F793E2EA07B173C742A6302879DE1B0BBB03817A5A04B572FBD82F984981D

RansomedVC \ RebornVC

hxxps[:]//ransomed[.]biz
TOX: FF59E28C08A4D0D9BA95EC6D72A15F7677D58E48EC5EE0D7CADEE0E7A1B3E37BFBD4996B41DD

Payouts King

hxxps[:]//payoutsgn7cy6uliwevdqspncjpfxpmzgirwl2au65la7rfs5x3qnbqd[.]onion
Tox ID: 535F403A2EA2DC71A392E18D7DB77FEF70845C0B7E5B9114CD30D301870304379C3547E324E2

Gunra

hxxp[:]//gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
qTox : 2507312EC10BB44ED9DAA04E3C5C27E8C13154649B1A02E73ACFAE1681EE0208D05133A8FB22
email : a00f105546345756@proton.me
qTox : 47829AF1C943D4C296C910706923A5199BDA4995B076ED9A9016F7DEF161D445DF00F13E6900

W.A.

hxxp[:]//weepangrbqjfsxd2noz4bmolztnqsma3vw4c6qfnbfusadzd2m26emqd[.]onion

worldleaks

hxxps[:]//worldleaksartrjm3c6vasllvgacbi5u3mgzkluehrzhk2jz4taufuid[.]onion

D4RK4RMY

hxxp[:]//d4rkd2fybtclo44hss2dpqpw7gmofboxhruax2az3uejw7puxxbpkvqd[.]onion

The Gentlemen's RaaS

hxxp[:]//tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion TOX ID F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E

Scattered LAPSUS$ Hunters

hxxp[:]//shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid[.]onion
hxxps[:]//breachforums[.]hn
shinyc0rp[@]tuta[.]io

hxxps[:]//shinyhunte[.]rs hxxp[:]//shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid[.]onion shinygroup[@]onionmail[.]com

kyblog

hxxp[:]//kyblogtz6k3jtxnjjvluee5ec4g3zcnvyvbgsnq5thumphmqidkt7xid[.]onion

Radar

hxxp[:]//3bnusfu2lgk5at43ceu7cdok5yv4gfbono2jv57ho74ucjvc7czirfid[.]onion
Session: 05e4f38090e06156b94ebf76e93ab4ccb761d761b886bbabf2df41c2bc341e8b30
TOX: 8F514E8FDA683D7C5957CE9560EB5941B4840DB0C3CEDEFB57FD8E2D8CF5884B44D99B872E93

BlackNevas

hxxp[:]//ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid[.]onion

CoinbaseCartel

hxxp://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd[.]onion
old TOX 1225DDE01980D7C7890A90E359EF4406D74DF7DB94F6C5F3B8378BB78444473022675C49FACB
old TOX 58041B45371485934F798C77F2F9705DA735F28AC9EBA2A19B4C9DBAF462802B88E33CEF482A
new A7580331D4D16453CCE86D7ADFBCF0CEED0D0D1AEA8F4DBEEBCA9E3B46308F260DE9B41BD838

ShinySp1d3r

Telegram: hxxps[:]//t[.]me/smokinmandiant (scattered LAPSUS$ hunters part 7)

Benzona Ransomware

hxxp[:]//benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd[.]onion
qTox: 7308E8CFE8AA18D718B5EF44C34A2E5E2C90B7FDB150FA2EC31E995F5F4B23044A98802A4DF0

CRY0 Team

cryoblogedawivdcknyd4jsjxkrx3xrqqltxla6wwjjnzm3f3jaxjzqd[.]onion
TOX: 54E9450799AFBBA90992E3C40F552C8C05D5765144396C6A1A622FD9DABD01101F9DC0CF90F4
CRY0 Team: "We host negotiation pages on the ICP blockchain. Victims no longer need Tor — the page opens in any browser via a direct link. This provides 100% uptime and complete DDoS immunity. The first step towards full decentralization. Example: hxxps[:]//gkb5c-taaaa-aaaae-adiwa-cai[.]icp0[.]io/?k=bca2b029a446a6fb9ac493a49ba5d5f790fc292d832e623b0ac49b5ac3adb972&campaign=9cdbc24a9386ea7d321c6b911952aaa5b0b4e7fe54d7f53ffa3bf36f718d7611&eh=4f2f5adb31efd07331ba09d9d67c5b0fb47d138976c521ce4a87e765bf73ece9 (chat is off)"

Obscura 2.0

hxxp[:]//obscurad3aphckihv7wptdxvdnl5emma6t3vikcf3c5oiiqndq6y6xad[.]onion
Tox: 7521730C07CF45D363A627F32B3102F3F7FA72F36C2C5F9EAB0C7FBA4668527F62A90EF333E6

MONOLOCK [ BEACON BASED RAAS ]

hxxps[:]//mlock[.]tel/

Orion Leaks

cjfntkj5qeizxowuy3srceg7zo6namc3kfeor7pfn6bpdkl3w265ooid[.]onion
TOX: 32C12B278912E26E5EAC57AEBB3F4FF16F0E31603C7B9D46AC02E9D993EE14351CEC3AB5945C

0APT

oaptxiyisljt2kv3we2we34kuudmqda7f2geffoylzpeo7ourhtz4dad[.]onion
QTOX: AE7FDDF4ADD95AC3DF29802662DA14C51E95A99992E8E087974AFE1A57481E5381FE429F8BC8
SESSION: 058818f5d84c39403b01ffa023a21b9fe118ffb237fd642c53e73944fb7ac02e6f

Insomnia

i62huw7ve22rpyw6lnq3kmfump2dmsg4xpveec3ere73njwatrz74gad[.]onion
Tox ID FA21E360945F602504728A05A39758C38B6A5B5DA1969717AF05838D14FDCD3DE17455833F11 \

Affilates Blacklist from NOVA, QILIN, DragonForce

blklun542qjdabcmx4igyf5wtw2v3tmhsbvu5aely25u2komohmn22ad[.]onion \

ShadowByt3$

mfbbt65kir2drc7tuoukwibikgvxquauscnzgbeltkmidjtgqlzm2qad[.]onion
sdwbytqeb664krp2wz2qs3lxxah2rhneuotot5hy7g4jpn2pindigcad[.]onion
Telegram: hxxps[:]//t[.]me/shadows_supp
hxxps[:]//t[.]me/techfood247 \

hyflock raas

TOX: 37BC1EC8D8EEE7ECEA44A953855DAC628DF0920CE41EE4164006BDC95ADEBA5738C870A23686

VECT

vectordntlcrlmfkcm4alni734tbcrnd5lk44v6sp4lqal6noqrgnbyd[.]onion
hxxps[:]//vect[.]breached[.]st
vect.breach5yz2b5lepmq4gaqwcon3jippw3bislhvvdavem5git55sy2nid[.]onion

FALCONC2

falkonpzmqkoo73n3urnnjkid6l7x7flfdzjv5hf53hfb5cqnb5hh3yd[.]onion

SevyWare RaaS

sevykkkuzbxjpkb7gtfxnltn73bm6vaxglxh5xsd55trqqew3xpowwid[.]onion

Wallstreet

4dwiv37h7hhuhjpvtn72hme4ylcv3qoe65arfc6mbweal7als6ma7pyd[.]onion
TOX: 0C659C8A2EE2EFEA357B688B08D917AEB3323B8CF49922095CBDA6388A93E64290E09FFCD406

SETTRA

settra5ldqwgtw5q7z5awbsvlksakyfojuc5slgrz5lvapune4fantqd[.]onion
TOX: D288571294F08ADDFE46DF631194745143BE8B40F9F846379040DC40EB39BC2E8CE056B66927

REDACT

neclc36yt4yaa5lv54kh4qbhvjcvuv6nnaurqowkellytpvj3afh4aid[.]onion
TOX: 48d52d08f74ceefb0e45009576c9d55b54559641e3147745e98e0e53c44f1f82

All operations under the Blackfile name have been permanently ceased and will not continue. However, our operations are not shutting down. We are continuing under a new name: REDACT.

BOLT

3pxt6o2ipwnfbgqvknydkizry5fysq4jmktxmrnfdgiii4fdkwfsliqd[.]onion
TOX: 9706FAA0ED53D780A2814439A34EE55BCB92FC817F5591FA8113AF30CBD411212B721451E591

SHIBA

shibaitobajtr6yctvrijfitnugfulkmprrqbmu2ysk3zyzx2ufe3yqd[.]onion
shibaitobajtr6yctvrijfitnugfulkmprrqbmu2ysk3zyzx2ufe3yqd[.]onion/leaks/p/E64KL3095Ii7mK7zstd-pq_e_5fVN1RC
TOX: 6765676AACF97FB4901F73C3290D44C9A7F99C5841A3EF1BF234C15758E975569D02548B1F16

Panzer

pnzruro7syvwvefx5mpo2fhzi4jftgquynsqf3vy5x3no57yp2iz4nyd[.]onion
TOX: 8C3D96497A9438794F705C055FC2FD3059F6CF11FF51060EE55ED7F0679CFC7218825BD56CB1 \

Storm

yqhecvqtdvq6p7duqcgw2qca77spbgakxcoibtx6zpvfshltsbbbhfqd[.]onion
Tox 1 (Affiliates): F9C46E2A5EF6FC962F20006C7114B47E558BBA660B6A90B2E840139BFFBB833686E37375D95D Tox 2 (Company): EF17A8BDCDD150FDFAA9EF5C6FB2EBB1CA1E858DD22ED6FD7485FB184493F1016029C05A9A4C

eclipse

eclipse4g5kxfwsvpu4qx5sdcnrji6gxl5gt67bucjlgt35g7akvjoid[.]onion
TOX: FDE578D55F8B692C4EB2CB5518C8B4FEE05F1620085F30302D782A2778FBEA12302B1B3EEAF5 Session: 0501a73078e4aaca2663f38de0a2397c8e6d8189f30b42bbec7d4e894bd0377766

Helix

helixr2sncrd3ndsz5oho6mzqw3x5u7mvox5zcsngc5wm7v4l5k7oryd[.]onion \

DarkProject

darkprn3d3udnhpuxknsrhft3376lrz5tenhgkrxge5hxqe46pkbrwid[.]onion
TOX ID: 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639

SHINYHUNTERS

shnyhntww34phqoa6dcgnvps2yu7dlwzmy5lkvejwjdo6z7bmgshzayd[.]onion
hxxps[:]//176[.]120[.]22[.]24/ \

Sovcali

z3mojpjnxt5tgqvu4wgosihl7pxvrcbyjcgquw2bwkyye5gwbhnf4kqd[.]onion/
SESSION ID: 058d6e873410870bb920e6aebda023f94514f6959c9823a4222265a1adeed69719

n0n

nongzecboljwv3yfndkggsybsglfrkffw7bvk2zemuteoxe6etpusnad[.]onion

Name		Name	Last commit message	Last commit date
README.md		README.md

Latest commit

History

Folders and files

Repository files navigation