benzona
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
14since 2025-11-26
Last post
01-30 17:41UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims14 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| casamedica.com.gt | · Jan 30, 2026 | — |
| empreinte-hotel.com | · Jan 22, 2026 | — |
| *a*ame*i*a.com.g* | · Jan 22, 2026 | — |
| ccbrt.org | · Jan 17, 2026 | — |
| em***int*-ho***.com | · Jan 17, 2026 | — |
| cc***.or.*z | · Jan 12, 2026 | — |
| taminsho.com | · Dec 22, 2025 | — |
| platinumone.in | · Dec 6, 2025 | — |
| SUNNYGO.COM.TW | · Dec 3, 2025 | — |
| suzuki-ploiesti.ro | · Nov 26, 2025 | — |
| poliserv.ro | · Nov 26, 2025 | — |
| mazda-ploiesti.ro | · Nov 26, 2025 | — |
| dacia-ploiesti.ro | · Nov 26, 2025 | — |
| sevci.org | · Nov 26, 2025 | — |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .