ZeroHour

fog

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
134since 2024-07-16
Last post
03-20 13:27UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
Mar-Bal (mar-bal.com) · Oct 23, 202437 GB
Lincoln University (lincolnu.edu) · Oct 22, 202410 GB
Clear Connection (clearconnection.com) · Oct 22, 202471 GB
Trimarc Financial (trimarc.com) · Oct 21, 20243 GB
Philadelphia Macaroni (philamacaroni.com) · Oct 21, 2024102 GB
Schweiger Transport (schweiger-gmbh.de) · Oct 21, 2024118 GB
Fromm (FrommBeauty.com) · Oct 18, 202416 GB
Ultra Tune (ultratune.com.au) · Oct 18, 20243 GB
Welker (welker.com) · Oct 16, 202427,6 GB
Cordogan Clark and Associates (cordoganclark.com) · Oct 16, 2024107 GB
Food Sciences Corporation (foodsciences.com) · Oct 16, 202486 GB
Central Pennsylvania Food Bank · Oct 15, 202420 GB
Juice Generation · Sep 20, 202410 GB
Sunrise Farms · Sep 19, 202430 GB
Prentke Romich Company · Sep 18, 2024250 GB
S. Walter Packaging · Sep 11, 2024
Clatronic International GmbH · Sep 11, 2024469 GB
Seaway Manufacturing Corp. · Aug 15, 2024
Ziba Design · Aug 6, 202422 GB
IOI Corporation Berhad · Aug 6, 202420 GB
Hi-P International · Aug 5, 202422 GB
unknown · Jul 31, 20240
BASF | Nunhems · Jul 29, 202430 GB
City of Cold Lake · Jul 26, 202410 GB
Odessa College · Jul 25, 202418 GB
00 · Jul 23, 20240
Wichita State University Campus of Applied Sciences and Technology · Jul 22, 202410 GB
Geelong Lutheran College · Jul 16, 20244GB
Asbury Theological Seminary · Jul 16, 202410 GB
Djg Projects · Jul 16, 202419.4GB
Verweij Elektrotechniek · Jul 16, 202495GB
Alvin Independent School District · Jul 16, 202460GB
West Allis-West Milwaukee School District · Jul 16, 20249,5 GB
German University of Technology in Oman · Jul 16, 202410 GB

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .