ZeroHour

babuk-bjorka

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
213since 2025-01-27
Last post
04-04 01:28UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
rheinmetall.com (Rheinmetall Defence) · Apr 4, 2025rheinmetall.com (Rheinmetall Defence)
Secret plans of Indian army · Apr 4, 2025Secret plans of Indian army
Bangladesh Armed Forces (BangLadesh Army) · Apr 4, 2025Bangladesh Armed Forces (BangLadesh Army)
Saudi Arabian military and government internal center · Apr 4, 2025Saudi Arabian military and government internal center
Hellenic Airforce · Apr 4, 2025Hellenic Airforce
turkish defense military · Apr 4, 2025turkish defense military
gangotreehomes.com (RealEstate) · Apr 3, 2025gangotreehomes.com (RealEstate)
Iran gas service system · Apr 3, 2025Iran gas service system,
kfar hatta medical center - Lebanon · Apr 3, 2025kfar hatta medical center - Lebanon
Polizia italia mail access · Apr 3, 2025Polizia italia mail access
zalora.sg (Singapore Shopping) · Apr 3, 2025zalora.sg (Singapore Shopping)
ezbuy.sg (Singapore Shopping) · Apr 3, 2025ezbuy.sg (Singapore Shopping)
dardoc.com · Apr 2, 2025dardoc.com
navy-mil-bd · Apr 2, 2025navy-mil-bd
ascires.com · Apr 2, 2025ascires.com
aosense.com - AO Sense INC. · Apr 2, 2025aosense.com - AO Sense INC.
drdo.gov.in · Apr 2, 2025drdo.gov.in
uniproof.com.br · Apr 1, 2025uniproof.com.br
(UPDATE) - whitecapcanada.com · Apr 1, 2025(UPDATE) - whitecapcanada.com
moh.gov.rw · Mar 31, 2025moh.gov.rw
pln.co.id - PLN INDONESIA · Mar 31, 2025pln.co.id - PLN INDONESIA
iDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers · Mar 29, 2025iDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers
elsoms.com · Mar 29, 2025elsoms.com
brune.com.br - Group MC (conglomerate) · Mar 29, 2025brune.com.br - Group MC (conglomerate)
towellengineering.net · Mar 29, 2025towellengineering.net
icvc.co - Instituto Cardiovascular del Cesar · Mar 29, 2025icvc.co - Instituto Cardiovascular del Cesar
modiin-ezrachi.co.il · Mar 29, 2025modiin-ezrachi.co.il
La Futura · Mar 29, 2025La Futura
Atlantic Coast Consulting Inc · Mar 29, 2025Atlantic Coast Consulting Inc
theeyeclinicsurgicenter.com - The Eye Clinic Surgicenter company · Mar 29, 2025theeyeclinicsurgicenter.com - The Eye Clinic Surgicenter company
🚀 Launch Your Own Ransomware(RAAS) Business with Our Exclusive Ransomware Panel Source Cod · Mar 28, 2025🚀 Launch Your Own Ransomware(RAAS) Business with Our Exclusive Ransomware Panel Source Code! 💰
healthcasts.com · Mar 28, 2025healthcasts.com
pureincubation.com · Mar 28, 2025pureincubation.com
leadzen.ai · Mar 28, 2025leadzen.ai
unired.uz · Mar 28, 2025unired.uz
nadra.gov.pk - NADRA official Of Pakistan Army & (Andhra Pradesh) · Mar 27, 2025nadra.gov.pk - NADRA official Of Pakistan Army & (Andhra Pradesh)
nadra.gov.pk - NADRA official Of Pakistan Army · Mar 27, 2025nadra.gov.pk - NADRA official Of Pakistan Army
aman-iraq.com · Mar 26, 2025aman-iraq.com
heras.co.uk · Mar 26, 2025heras.co.uk
alliedwoundcare.com · Mar 26, 2025alliedwoundcare.com
crimsgroup.com · Mar 26, 2025crimsgroup.com
mot.gov.iq - Iraqi Ministry of Commerce (Of Trade) · Mar 26, 2025mot.gov.iq - Iraqi Ministry of Commerce (Of Trade)
israel Infrastructure & Secret Documents intelligence information · Mar 26, 2025israel Infrastructure & Secret Documents intelligence information
kalesavunma.com - KALE SAVUNMA. · Mar 25, 2025kalesavunma.com - KALE SAVUNMA.
airexplore.aero · Mar 24, 2025airexplore.aero
iberdrola.com (Spain energy) · Mar 24, 2025iberdrola.com (Spain energy)
let's join us babuk locker (Ransomare Affiliate) 2025 · Mar 22, 2025let's join us babuk locker (Ransomare Affiliate) 2025
inmarsat.com · Mar 22, 2025inmarsat.com
jp-property.com · Mar 22, 2025jp-property.com
Synesis Surveillance System · Mar 22, 2025Synesis Surveillance System

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .