doommageddon
ransomware group · aka doommageddon · unknown · active since unknown (dashboard tracking of this group began 2026-07-03)
doommageddon is a data-extortion brand tracked through its public leak site, which names victims to pressure payment; public reporting on the operators' origin, ransomware family, and links to established crews is limited, so these details remain unknown. This dashboard recorded 10 victims between 2026-07-03 and 2026-08-29, indicating an active but low-volume operation. Observed victims skew toward Trkiye and Latin America, spanning logistics, real estate, machinery/steel manufacturing, chemicals, healthcare, automotive, and financial services. The listing of a globally recognizable company (Mercedes-Benz Trk) alongside smaller regional firms suggests mixed-scale targeting. No public earnings data or CVE associations were identified at the time of this profile.
- Operates a public leak site naming victims to pressure payment (data-extortion model).
- Double extortion (data theft plus leak threat) presumed, but ransomware family and tooling attribution unknown.
- Observed victim geography concentrated in Trkiye and Latin America.
- Multi-sector targeting: logistics, real estate, manufacturing, chemicals, healthcare, automotive, financial services.
- Low posting cadence: 10 victims across the first ~8 weeks of dashboard tracking.
- Initial access vector, affiliate structure, and operator backgrounds: unknown per public reporting.
Mercedes-Benz Trk (Trkiye - automotive) - as listed on the group's leak site, SITTNAK Lojistik A.. (Trkiye - logistics), KOLORKIM KIMYA (Trkiye - chemicals), iw steelTEC Makine San. ve Tic. A.. (Trkiye - machinery/steel), Akpera Gayrimenkul Yatrm A.. (Trkiye - real estate), Reni Farmcias Associadas (pharmacy retail - as listed on the group's leak site), Hospital Di Camp (healthcare - as listed on the group's leak site), Solventa & Riskmetrica, Calificadora de Riesgos (financial services / risk rating - as listed on the group's leak site)
No public figure.
Leak-site victims11 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| INCOR Group | · 2d ago | upcoming | — | 0 files |
| SITTNAK Lojistik A.Ş. | · 17d ago | upcoming | — | 0 files |
| Akpera Gayrimenkul Yatırım A.Ş. | · 17d ago | upcoming | — | 0 files |
| iw steelTEC Makine San. ve Tic. A.Ş. | · Jul 26, 2026 | upcoming | 100 GB | 0 files |
| Reni Farmácias Associadas | · Jul 20, 2026 | upcoming | N/A | 0 files |
| Hospital Di Camp | · Jul 10, 2026 | upcoming | N/A | 0 files |
| KOLORKIM KIMYA | · Jul 3, 2026 | LEAKED | 1GB | 1 files |
| Mercedes-Benz Turk | · Jul 3, 2026 | LEAKED | 50GB | 1 files |
| Innovano | · Jul 3, 2026 | LEAKED | 1GB | 1 files |
| Francisco Imóveis | · Jul 3, 2026 | LEAKED | 1 files |
| Solventa & Riskmetrica | Calificadora de Riesgos | · Jul 3, 2026 | upcoming | 0 files |
In the newsAll →
No articles mention this group yet.