ZeroHour

devman2

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
217since 2025-07-06
Last post
02-04 01:43UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
c*a*c*.c*m · Dec 1, 2025
a*f*o.us · Dec 1, 2025
gsccca.org · Nov 21, 2025
procure.com · Nov 21, 2025
mcchemical.com · Nov 19, 2025
future.com.bo · Nov 19, 2025
f*t*r*.com.** · Nov 17, 2025
****clinic.com.** · Nov 17, 2025
ctfc.cat · Nov 12, 2025
omniumint.com · Nov 11, 2025
IT IS NOW FORBIDDEN TO LOCK THESE COUNTRIES: Mali Central African Republic Burkina Faso Ni · Nov 8, 2025
www.oucru.org · Nov 5, 2025
www.heitech.com.my · Nov 3, 2025
m*c*e*ic*l.com · Nov 1, 2025
o*c*u.o** · Nov 1, 2025
juntalocal.cdmx.gob.mx · Nov 1, 2025
News for recovery companies · Oct 29, 2025
fhw.org · Oct 28, 2025
h*i**c*.c*m.my · Oct 28, 2025
r*p**fl*wa*ps.com · Oct 28, 2025
g*e*g*o**l.com · Oct 28, 2025
h*tel*ys*e*s.pl · Oct 28, 2025
pharmaciedesalizes.fr · Oct 17, 2025
www.o****m*nt.com · Oct 16, 2025
MAKE CIS SAFE AGAIN · Oct 15, 2025
EMBASY OF BOLIVIA DC · Oct 15, 2025
regionalurology.com · Oct 15, 2025
****** embassy D.C · Oct 13, 2025
wrapex.ca · Oct 10, 2025
r******urology.com · Oct 10, 2025
forestry.gov.jm · Oct 10, 2025
pure-chemical.com · Oct 10, 2025
braswellsvc.com · Oct 10, 2025
shimaogroup.com · Oct 10, 2025
naturmaelk.dk · Oct 6, 2025
www.hameshakem.co.il · Oct 3, 2025
teeuwissen.com · Oct 3, 2025
t*t*a**o**.com · Oct 1, 2025
a**h*y*in*er**t**nal.c*m · Oct 1, 2025
www.profimetrics.com · Oct 1, 2025
e***.o*g · Oct 1, 2025
Talants wanted · Sep 30, 2025
We once again need reaserchers to document · Sep 30, 2025
China Harbour Engeneiring Company · Sep 30, 2025
pestbusters.com.sg · Sep 30, 2025
NSSF KENYA · Sep 30, 2025
www.braswellsvc.com · Sep 30, 2025
busaba.com · Sep 30, 2025
www.chicagobotanic.org · Sep 30, 2025
r3consulting.com · Sep 30, 2025

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .