eraleign (apt73)
ransomware group · aka Eraleign, Apt73 (tracking name used on this dashboard) · unknown (no widely reported attribution or country of origin) · active since 2026-06-23 (first tracked leak-site victim post per this dashboard; earlier activity unknown)
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
13
All-time (tracked)
177since 2024-04-23
Last post
07-24 11:59UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Eraleign (tracked on this dashboard as apt73) is a data-extortion group whose leak-site activity was first tracked on 2026-06-23, with 13 victims posted through 2026-07-24. Posting is intermittent, with bursts of listings followed by multi-week gaps and zero new victims in the most recent 7- and 30-day windows. The victim set is globally distributed and sector-diverse, spanning a Brazilian government domain (gov.br), Vienna International Airport, cement, mining, IT/hosting, e-commerce, and hospitality targets, suggesting opportunistic rather than sector-focused targeting. In at least one case (Vienna Airport) the group marked the victim's data as sold to a third party rather than published, indicating data-sale monetization alongside leak-site extortion. Attribution, origin, initial-access methods, tooling, and earnings are not established in widely available public reporting and remain unknown.
Tactics & tooling
- Publishes stolen victim data on a dedicated leak site when extortion goes unresolved
- Sells stolen data to third parties (one tracked victim flagged 'SOLD TO 3RD PARTY' per this dashboard)
- Opportunistic, multi-region, multi-sector victim selection based on tracked posts
- Intermittent leak-site cadence, with multi-week gaps between victim posts
- Initial access vectors, malware/tooling, and whether encryption is used in intrusions: unknown in public reporting
Targeted sectors
GovernmentAviation/transportBuilding materials/cementMiningIT services/hostingRetail/e-commerceGaming/hospitalityNo established sector focus (based on 13 tracked victims)
Notable public victims
Vienna International Airport (viennaairport.com) - listing flagged 'SOLD TO 3RD PARTY' per this dashboard, Brazilian federal government (gov.br) - listed on leak site per this dashboard, Kliknklik e-commerce platform (kliknklik.com) - listed on leak site per this dashboard
Estimated earnings
No public figure.
Leak-site victims177 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| metrabyte.cloud | · Jul 24, 2026 | metrabyte.cloud is the website of Metrabyte Cloud Co., Ltd., a cloud service provider from Thaila... |
| dgcement.com | · Jul 6, 2026 | dgcement.com — this is the website of D.G. Khan Cement Company Limited (DG Cement), a major cem... |
| azarestan.com | · Jul 6, 2026 | azarestan.com (Azarestan Business Development Group) is a holding company based in Iran. Azaresta... |
| vicentetrapani.com | · Jul 6, 2026 | vicentetrapani.com — this is the website of Vicente Trapani S.A., an agro-industrial holding co... |
| westernint.com | · Jul 6, 2026 | Western International Group is a large private conglomerate based in Dubai that operates in the r... |
| aydeniz.com | · Jul 3, 2026 | Aydeniz Group is a family-owned group of companies founded in 1975, operating in several key indu... |
| flazio.com | · Jul 2, 2026 | lazio.com — this is a company from Italy. Flazio is a website builder platform that allows use... |
| holidaypalace.com | · Jul 2, 2026 | Holiday Palace Hotel in Spain. Guest information, internal documents, reports, photos, videos, an... |
| ritavo.com | · Jul 2, 2026 | ritavo.com is the website of Rita Võ Group, a private multidisciplinary holding company from Vie... |
| viennaairport.com (SOLD TO 3RD PARTY) | · Jun 29, 2026 | SOLD TO 3RD Party! No DATA AVALIABLE! Vienna Airport (Flughafen Wien AG) is an Austrian company, ... |
| gov.br | · Jun 23, 2026 | Gov.br — this is the official state digital platform and domain zone of the Brazilian Federal G... |
| kliknklik.com | · Jun 23, 2026 | KliknKlik.com — a company from Indonesia, an online retailer and distributor of computer equipm... |
| viennaairport.com | · Jun 23, 2026 | Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A... |
| smarty.arpinet.am | · Jun 3, 2026 | arpinet.am - it is an online platform for managing real estate data in the Armenian market, provi... |
| elections.mia.gov.am from WOLVES OF TURAN | · Jun 2, 2026 | Hello, dear visitors of Bashe's blog. Today, we contacted the Turkish Wolves of Turan group and b... |
| tkgm.gov.tr | · May 22, 2026 | TKGM (Tapu ve Kadastro Genel Müdürlüğü) is a government agency from Turkey, the General Dire... |
| minsa.com.mx | · May 22, 2026 | Minsa is a company from Mexico, one of the largest producers of nixtamalizada (masa harina) corn ... |
| tvnmedia.com | · May 22, 2026 | TVN Media is a multimedia company from Panama, engaged in broadcasting, radio, digital media and ... |
| grupopetersen.com.ar | · May 21, 2026 | Grupo Petersen is a multidisciplinary financial and industrial group from Argentina, operating in... |
| alkaloid.com.mk | · May 21, 2026 | Alkaloid is a pharmaceutical company from Northern Macedonia, founded in Skopje in 1936, producin... |
| narit.or.th | · May 21, 2026 | The National Astronomical Research Institute of Thailand (Thailand's National Astronomical Resear... |
| ungererandcompany.com | · May 21, 2026 | Ungerer & The Company is an American company founded in 1893 that develops and manufactures flavo... |
| providentgh.com | · Apr 27, 2026 | Provident Insurance Limited Company is an insurance company in Ghana that provides insurance (aut... |
| medikaplaza.com | · Apr 27, 2026 | Medika Plaza is a healthcare company in Indonesia that provides medical services, corporate medic... |
| jgpetrucci.com | · Apr 27, 2026 | J.G. Petrucci Company, Inc. is a real estate development and construction company in the United S... |
| grupo-principal.com | · Apr 27, 2026 | Grupo Principal is a distribution company in Mexico that supplies and sells consumer goods (FMCG)... |
| cofaco.com | · Apr 27, 2026 | Cofaco Industries S.A.C. is a textile company in Peru, which produces fabrics and tailoring (a fu... |
| dunav.com | · Apr 27, 2026 | Dunav Insurance Company is an insurance company in Serbia that provides insurance for life, prope... |
| algosaibi-gtb.com | · Apr 27, 2026 | Abdulaziz & Saad Almoosaibi & GBT (Al‑Gosaibi GTB) is an industrial company in Saudi Arabia tha... |
| alx-pc.com | · Apr 27, 2026 | Alexandria Petroleum Company (APC) is a state—owned oil refining company in Egypt that processe... |
| arrawdah.org.sa | · Apr 27, 2026 | Al Rawdah Cooperative Society is a cooperative organization in Saudi Arabia that provides social ... |
| ifmis.go.ke | · Apr 13, 2026 | Integrated Financial Management Information System (IFMIS) is a government system in Kenya that i... |
| whessoe.com.my | · Apr 13, 2026 | Whessoe Engineering (Malaysia) Sdn Bhd is an engineering company in Malaysia that designs and bui... |
| olpro.com.my | · Apr 13, 2026 | OLPRO Engineering Sdn Bhd is an engineering company in Malaysia that designs and manufactures ind... |
| phb.com | · Apr 13, 2026 | PHB Inc. is an industrial company in the United States that manufactures equipment and metal stru... |
| egov.sc | · Apr 9, 2026 | eGov Seychelles is a government portal in Seychelles that provides online public services and ele... |
| asunim.co | · Apr 9, 2026 | Asunim is a company operating in the field of renewable energy, which is engaged in the developme... |
| ires.ma | · Mar 26, 2026 | Institut Royal des Études Stratégiques is a state—owned analytical center in Morocco, which i... |
| 2m.ma | · Mar 26, 2026 | 2M TV (2m.ma ) is a national television channel in Morocco, which is engaged in television broadc... |
| centrum.sk | · Mar 26, 2026 | Centrum.sk (centrum.sk ) is an online portal in Slovakia that provides an email service, news and... |
| iam.ma | · Mar 26, 2026 | Maroc Telecom is a telecommunications company in Morocco that provides mobile communications, Int... |
| dpwh.gov.ph | · Mar 17, 2026 | Department of Public Works and Highways is a government agency in the Philippines that is respons... |
| doghairinc.com | · Mar 17, 2026 | Dog Hair INCluded is a small company (online brand) that sells pet accessories and products with ... |
| vanheyghenstaal.be | · Mar 17, 2026 | Van Heyghen Staal is a metallurgical company in Belgium, which is engaged in the processing and r... |
| isosl.be | · Mar 17, 2026 | ISOSL is an engineering company in Belgium, which deals with industrial solutions, automation and... |
| moccae.gov.ae | · Mar 12, 2026 | The Ministry of Climate Change and Environment (moccae.gov.ae) is a government ministry in the Un... |
| shj.ae | · Mar 12, 2026 | Sharjah Electricity, Water, and Gas Authority (sec.shj.ae) is a government-owned utility in Sharj... |
| gedco.ps | · Mar 12, 2026 | gedco.ps is the website of the Gaza Electricity Distribution Company (GEDCO), the electricity dis... |
| haca.ma | · Mar 12, 2026 | haca.ma is the official website of the High Authority for Audiovisual Communication (HACA). The o... |
| seit.cl | · Mar 11, 2026 | seit.cl is the website of SEiT S.p.A., a company providing IT services to businesses in Chile. In... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .