arcus media
ransomware group · aka ArcusLocker, Actier · unknown · active since 2019 (earliest public activity; Rapid7, 2023)
Victims · 7d
1▲1 vs prev. week
Victims · 30d
3active targets
Victims · 90d
12
All-time (tracked)
112since 2024-05-15
Last post
09-15 17:37UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Arcus Media is a ransomware and data-extortion group first documented in 2019, best known for the Nim-based ArcusLocker encryptor for Windows and a later variant tracked as Actier (Rapid7, 2023). Public reporting describes slow, methodical operations with long dwell times, initial access via vulnerable or exposed RDP — at times through Veeam backup servers — and abuse of the legitimate ITarian RMM tool for remote access and persistence. The group runs a leak site used for double-extortion pressure; this dashboard tracked 11 leak-site victims since 2026-07-06, with 2 posts in the last 30 days and the latest post on 2026-08-24. Publicly listed victims span multiple countries and industries, including IT services, engineering, manufacturing, energy, and travel. Attribution, national origin, and earnings are not publicly reported.
Tactics & tooling
- Initial access via vulnerable or exposed RDP
- Use of Veeam backup infrastructure as an access vector (per Rapid7, 2023)
- Abuse of legitimate ITarian RMM tool as a backdoor/remote-access channel
- Deployment of Nim-based Windows ransomware (ArcusLocker)
- Use of the Actier ransomware variant
- Data exfiltration combined with leak-site posting for double extortion
- Long dwell time and slow-paced operations ('lazy' operator behavior per Rapid7, 2023)
Targeted sectors
IT services/softwareengineeringmanufacturingenergytraveldistribution
Notable public victims
ManagementPro, Mark'Techno, Brazer Ingenierie, Power Moendas, Perpustam, gemese.pt, Distribox, Be Travel, COREBI (NowVertical), I-FITNESS
Estimated earnings
No public figure.
Leak-site victims112 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Asada Sarapiqu | · 3h ago | — |
| ManagementPro | · 22d ago | — |
| Mark’Techno | · 22d ago | — |
| Brazer Ingenierie | · Jul 25, 2026 | — |
| Power Moendas | · Jul 25, 2026 | — |
| Perpustam | · Jul 14, 2026 | — |
| gemese.pt | · Jul 14, 2026 | — |
| Distribox | · Jul 14, 2026 | — |
| Be Travel | · Jul 14, 2026 | — |
| COREBI(NowVertical) | · Jul 14, 2026 | — |
| I-FITNESS | · Jul 14, 2026 | — |
| East African Gasoil | · Jul 6, 2026 | — |
| Announcement 16-09-2025 | · Sep 17, 2025 | Hey , We have been offline for weeks .we taught it is time to rebrand our Project And try … |
| Grup Gestio | · Sep 17, 2025 | Days00006666Hours22222222Minutes22225555Seconds22228888 grupgestio.net We are a consultancy with more than 25 years of experience with the clear id… |
| Tunad | · Sep 17, 2025 | Days00006666Hours22222222Minutes22225555Seconds22228888 Tunad.io Tunad is a Media Intelligence Platform that enhances the results of advertising ca… |
| Accflex ERP | · Sep 17, 2025 | Days00006666Hours22222222Minutes22225555Seconds22228888 www.accflex.com With the help of experienced and qualified programmers, and distinguished w… |
| EB Farmacutica | · Aug 13, 2025 | Days00006666Hours22223333Minutes00000000Seconds44447878 ebfarmaceutica.com.br EB Farmacêutica operates in the distribution of manufactured medicine… |
| CCI Torrevieja | · Jul 28, 2025 | Days00006666Hours22223333Minutes00007777Seconds00004444 ccitorrevieja.comAt CCI Torrevieja, we are proud to offer a wide range of IT services to m… |
| College stjb | · Jul 28, 2025 | Days00006666Hours22223333Minutes00007777Seconds00004444 stjb-delasalle.frThe Collège Saint Jean-Baptiste de La Salle is a Catholic establishment b… |
| I.P. One LTD | · Jul 26, 2025 | Days00006666Hours22223333Minutes22222222Seconds11114444 I.P. One was established in 1972. We are proud to be the first Thai company who formulate … |
| Protech Medical | · Jul 22, 2025 | Days00006666Hours22221111Minutes22227777Seconds22228888 www.protechmedical.co.uk Protech Medical Limited are holding large stocks of our entire ran… |
| SubsCorp | · Jul 22, 2025 | Days00006666Hours22221111Minutes22227777Seconds22228888 Subs Corp S.A.S. is a company in Colombia, with a head office in Barranquilla. The enterpr… |
| Assetlabs | · Jul 5, 2025 | Days00006666Hours22223333Minutes33333333Seconds00003333 assetlabs.com Streamline365 provides a data intelligence platform designed to transform inv… |
| BD Group | · Jul 5, 2025 | Days00006666Hours22223333Minutes33333333Seconds00003333 bdgroup.com.bd Today, BD Group products are a household name in Bangladesh and enjoyed by o… |
| RG Mexico | · Jul 5, 2025 | Days00006666Hours22223333Minutes33333333Seconds00003333 rgmexico.com.mx RG Mexico, 30 years of providing peace of mind and security in: We have a s… |
| STANDBYTE | · May 30, 2025 | Days00006666Hours22223333Minutes00004444Seconds44440101 standbyte.com.br A Standbyte Computer it is an electronics store located in the center of L… |
| Acorn Sales | · May 30, 2025 | Days00006666Hours22223333Minutes00004444Seconds44440101 www.acornsales.com Acorn Sales has been providing marking and identification supplies since… |
| Antea Luce | · May 26, 2025 | Days00006666Hours22223333Minutes55550000Seconds11112222 www.antealuce.com Our adventure began over 40 years ago and over the years has led to a gre… |
| Colegio de la Compania de Maria Vigo | · May 18, 2025 | Days00006666Hours22223333Minutes44444444Seconds55550101 ciamariavigo.org Make the Mission of the Company of Mary a reality in schools owned by the … |
| Fong Shann Printing Philippines | · May 18, 2025 | Days00006666Hours22223333Minutes44444444Seconds55550101 fongshann.com.ph e aim to be the best printing industry in the Philippines, We strive to sa… |
| Road Development Corporation | · May 18, 2025 | Days00006666Hours22223333Minutes44444444Seconds55550101 www.rdc.com.mv Road Development Corporation is a 100% state owned entity formed by a presid… |
| RECI SYSTEMS | · May 18, 2025 | Days00006666Hours22223333Minutes44444444Seconds55550101 www.recisystems.com RECISYSTEMS as a company dedicated to the sale, repair and maintenance … |
| Grupo Boulevard | · May 18, 2025 | Days00006666Hours22223333Minutes44444444Seconds55550101 grupoboulevard.com Grupo Boulevard es un grupo empresarial constituido en la zona norte de … |
| Coopertruni | · Mar 19, 2025 | Days00006666Hours11117777Minutes44440000Seconds55559999 www.coopertruni.com.br Cooperativa dos Transportadores Unidos Ltda – COOPERTRUNI is a… |
| THX Transport | · Mar 19, 2025 | Days00006666Hours11117777Minutes44440000Seconds55559999 www.thxtransport.com THX Transport LLC is a company that operates in the Transportation ind… |
| Kiribati Government | · Mar 19, 2025 | Days00006666Hours11117777Minutes44440000Seconds55559999 Kao.gov.ki they have limited time to Contact Us before we Leak : Government Ministries and … |
| HYPONAMIRU | · Mar 12, 2025 | Days00006666Hours22223333Minutes00002222Seconds22225656 www.hyponamiru.cz Hyponamiru company is behind a comprehensive web application that signifi… |
| HYPERNOVA TELECOM | · Mar 12, 2025 | Days00006666Hours22223333Minutes00002222Seconds22225656 www.hypernovatelecom.com.br You know that nowadays the internet is no longer a luxury, but … |
| REYCOTEL | · Mar 8, 2025 | Days00006666Hours22222222Minutes55559999Seconds33330000 reycotel.com Reycotel is an e-commerce website for consumer electronics products. Products … |
| LINKGROUP | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 linkgroup.co.za Hard landscaping including new patios, retaining walls, rockeries, decking,… |
| Openreso | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 openreso.com Openreso is a company that operates in the Consumer Services industry, has 1Mt… |
| Itapeseg | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 itapeseg.com.br Itapeseg is a company that operates in the Manufacturing industry, has 1Mto… |
| logic insectes | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 logicinsectes.com Our benefits include treatment for ratat, disinsecting and disinfection. … |
| RJ IT Solutions | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 RJ IT Solutions is a company that operates in the Repair Services industry EST SELL : 5 Day… |
| Grafitec | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 grafitec.co.uk Welcome to Grafitec Ltd the UK’s largest stockist of top quality binding and… |
| synaptic.co.tz | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 synaptic.co.tz Synaptic Solutions combines mature processes, robust delivery models and wor… |
| ICO | · Mar 4, 2025 | Days00007777Hours00009999Minutes44447777Seconds22227878 ico.com.br Since 1986, ICO ESTACIONAMENTOS has been offering its customers ???safety???, qu… |
| New .Gov ? | · Mar 4, 2025 | thanks to affiliates , we have hacked 2 gov this month , in case they don`t cooperate their… |
| Falcon Gaming | · Feb 1, 2025 | Days00007777Hours11112222Minutes00003333Seconds22224545 www.falcongaming.com.auFalcon Gaming’s headquarters are located at Australia and its… |
| Eascon | · Feb 1, 2025 | Days00007777Hours11112222Minutes00003333Seconds22224545 www.eascon.com.br Eascon Contabilidade is a company specializing in outsourced accounting s… |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .