arcus media
ransomware group · aka ArcusLocker, Actier · unknown · active since 2019 (earliest public activity; Rapid7, 2023)
Victims · 7d
1▲1 vs prev. week
Victims · 30d
3active targets
Victims · 90d
12
All-time (tracked)
112since 2024-05-15
Last post
09-15 17:37UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Arcus Media is a ransomware and data-extortion group first documented in 2019, best known for the Nim-based ArcusLocker encryptor for Windows and a later variant tracked as Actier (Rapid7, 2023). Public reporting describes slow, methodical operations with long dwell times, initial access via vulnerable or exposed RDP — at times through Veeam backup servers — and abuse of the legitimate ITarian RMM tool for remote access and persistence. The group runs a leak site used for double-extortion pressure; this dashboard tracked 11 leak-site victims since 2026-07-06, with 2 posts in the last 30 days and the latest post on 2026-08-24. Publicly listed victims span multiple countries and industries, including IT services, engineering, manufacturing, energy, and travel. Attribution, national origin, and earnings are not publicly reported.
Tactics & tooling
- Initial access via vulnerable or exposed RDP
- Use of Veeam backup infrastructure as an access vector (per Rapid7, 2023)
- Abuse of legitimate ITarian RMM tool as a backdoor/remote-access channel
- Deployment of Nim-based Windows ransomware (ArcusLocker)
- Use of the Actier ransomware variant
- Data exfiltration combined with leak-site posting for double extortion
- Long dwell time and slow-paced operations ('lazy' operator behavior per Rapid7, 2023)
Targeted sectors
IT services/softwareengineeringmanufacturingenergytraveldistribution
Notable public victims
ManagementPro, Mark'Techno, Brazer Ingenierie, Power Moendas, Perpustam, gemese.pt, Distribox, Be Travel, COREBI (NowVertical), I-FITNESS
Estimated earnings
No public figure.
Leak-site victims112 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Utilissimo Transportes | · Feb 1, 2025 | Days00007777Hours11112222Minutes00003333Seconds22224545 www.utilissimo.com.br Utilissimo Transportes is a company that operates in the Security Pro… |
| GATTELLI SpA | · Feb 1, 2025 | Days00007777Hours11112222Minutes00003333Seconds22224545 www.gattelli.it Gatelli Prefabbricati S.p.A. has been operating for many years in the civil… |
| Technico | · Feb 1, 2025 | Days00007777Hours11112222Minutes00003333Seconds22224545 www.technico.com.br Founded by German Wolfgang Roddewig in 1983, Technico Comercial de Equi… |
| Enge Ilha Construção | · Dec 29, 2024 | Days00007777Hours00002222Minutes22220000Seconds33334545 www.engeilha.com.brEnge Ilha Construção E Terraplenagem Ltda Me is a company that operates… |
| Hi-Raise Constructions Holding | · Dec 29, 2024 | Days00007777Hours00002222Minutes22220000Seconds33334545 www.hi-raise.comThanks to innovative technologies and high-quality modern equipment, the c… |
| Megaexit | · Dec 29, 2024 | Days00007777Hours00002222Minutes22220000Seconds33334545 www.megaexit.comMegaexit SL was created in 1989. With the sole mission of wholesale produc… |
| Wosac | · Dec 29, 2024 | Days00007777Hours00003333Minutes55552222Seconds33334545 www.Wosac.co.tzWosac Limited offers a wide range of products and services including electr… |
| Innois | · Dec 29, 2024 | Days00005555Hours00002222Minutes22220000Seconds33334545 www.innois.ininnois is a fast growing IT company and leading provider of IT solution and s… |
| Meerapfel Family | · Dec 29, 2024 | Days00007777Hours00002222Minutes22220000Seconds33334545 meerapfel.comM. Meerapfel and currently ship to most countries around the world. MMS Belgi… |
| IEC + EMCO | · Dec 29, 2024 | Days00007777Hours00002222Minutes22220000Seconds33334545 www.iec.com.pkwww.emco.com.pkIn 1951, a very modest beginning was made by setting up a sma… |
| Engenet Informatica | · Dec 29, 2024 | Days00007777Hours00002222Minutes22220000Seconds33334545 www.engenet-recife.com.br–Engenet Informatica is a company that operates in the Faci… |
| Symantric IT | · Nov 21, 2024 | Days00006666Hours22222222Minutes55552222Seconds55552222 Symantric IT & Network Co., Ltd. was established and started its operations in 2006. W… |
| MGEMAL | · Nov 21, 2024 | Days00007777Hours22222222Minutes22229999Seconds33331111 www.mgemal.com.brand efficiency, to guarantee constant satisfaction and peace of mind to o… |
| PK Mulyo | · Nov 21, 2024 | Days00006666Hours22222222Minutes44449999Seconds55556666 www.mulyo.comThe Mulyo story began in Salatiga, Central Java, Indonesia, in 1965. At the t… |
| Barneek Safety Consultancies | · Nov 21, 2024 | Days00006666Hours11117777Minutes44449999Seconds55556666 www.barneekleptis.aeBarneek Safety Consultancies is an independently registered, professio… |
| Trust Seeds | · Nov 21, 2024 | Days00007777Hours22222222Minutes44448888Seconds55556666 www.trustseeds.comTRUST SEEDS, was established in 1986 as a family company in Amman-Jordan… |
| HM Environmental Services | · Nov 21, 2024 | Days00006666Hours11118888Minutes55553333Seconds55556666 www.hmenvironmental.comHM Environmental Services, Inc. is a full-service, environmental, r… |
| IT Networks | · Nov 21, 2024 | Days00008888Hours11114444Minutes55553333Seconds55556666 https://itnetworks.mx/We exist to provide innovative and optimal solutions always thinking… |
| Surfnet Communications | · Oct 29, 2024 | www.surfnetc.com Surfnet Communications is a high-speed... |
| Interbel | · Oct 20, 2024 | www.interbel.esInterbel: Pioneers in Email & Cybersecurity... |
| Petropolis Pet Resort | · Oct 20, 2024 | www.petropolis.comPetropolis Pet Resort has offered everything... |
| Superior Quality Insurance Agency | · Oct 20, 2024 | Superior Quality Insurance is a company... |
| Vasesa | · Oct 20, 2024 | www.vasesa.com.mxVasesa Vasesa is a company that... |
| Country Club El Bosque | · Oct 20, 2024 | www.elbosque.org.peCountry Club El Bosque is a... |
| Frigocenter | · Sep 24, 2024 | Frigocenter.com.brFrigocenter is a company that operates... |
| Partners Air | · Sep 24, 2024 | Partners Air is a company that... |
| Solutii Sistemas | · Sep 24, 2024 | Solutii.com.brSolutii Sistemas is a borderless Information... |
| Nova Sinseg | · Sep 24, 2024 | Novasinseg.com.brNova Sinseg is a company that... |
| Emtel | · Sep 15, 2024 | https://www.emtel.com Emtel is a leading telecommunications... |
| Announcement 9-14 | · Sep 15, 2024 | Hey , With decision of Admins... |
| Gino Giglio Generation Spa | · Sep 15, 2024 | gigliospa.comGino Giglio Generation Spa – Il... |
| Rextech | · Sep 15, 2024 | Rextech can handle all the company’s... |
| Like Family’s | · Sep 15, 2024 | www.likefamilypr.comLike Family is a Puerto Rican... |
| UNI-PA A.Ş | · Sep 15, 2024 | www.unipa.com.tr UNI-PA A.Ş., one of the... |
| Doodle Tech | · Jul 20, 2024 | https://doodletech.aeWith our unique blend of expertise,... |
| GED Lawyers | · Jul 12, 2024 | Gedlawyers.com Proudly Serving Clients For Personal... |
| Clima Lodi | · Jun 29, 2024 | https://www.climalodi.com Innovative heating and air conditioning... |
| DatAnalítica | · Jun 29, 2024 | www.datanalitica.comWe are the Dominican consulting firm... |
| Freightliner of Grand Rapids & Kalamazoo | · Jun 29, 2024 | https://www.ftlgr.com Freightliner of Grand Rapids &... |
| GED Lawyers – Sells Open | · Jun 26, 2024 | Gedlawyers.com Proudly Serving Clients For Personal... |
| Total Revisjon DA | · Jun 26, 2024 | Totalrevisjon.no tal Revisjon DA ble stiftet... |
| Exhaustpro shops | · Jun 20, 2024 | This female owner and her partners... |
| BankSelfStorage | · Jun 20, 2024 | We offer personal and business storage... |
| GED Lawyers & .. | · Jun 20, 2024 | Gedlawyers.com Proudly Serving Clients For Personal... |
| WinFashion ERP | · Jun 11, 2024 | WinFashion is an international company supplying... |
| Langescheid GbR | · Jun 4, 2024 | your traditional logistic partner from Germany.... |
| Franja IT Integradores de Tecnología | · Jun 4, 2024 | Franja IT is a company that... |
| Duque Saldarriaga | · Jun 4, 2024 | We are a marketing company, established... |
| BHMAC | · Jun 4, 2024 | Bhmac is a company that operates... |
| Botselo | · Jun 4, 2024 | Botselo.co.za Botselo Mills is a company... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .