ZeroHour

helldown

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
32since 2024-08-13
Last post
11-06 12:30UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
klinkamkurpark · Nov 6, 2024klinik-am-kurpark.de
hausdesstiftens.org · Nov 6, 2024hausdesstiftens.org
nightnurse.ch · Nov 6, 2024www.nightnurse.ch
fuelco · Nov 6, 2024fuelco-us.com
VALLEYFIRM · Nov 6, 2024valleyfirm.com
children · Nov 6, 2024generaldentistryforchildren.com
knoxlawcenter · Nov 6, 2024www.knoxlawcenter.com
AMERICANVENTURE · Nov 6, 2024americanventures.com
CSIKBS · Nov 6, 2024www.csikitchenandbath.com
SANJACINTOCOUNY · Nov 6, 2024www.co.san-jacinto.tx.us
compassfs · Nov 6, 2024www.compassfs.net
lacliniqueducoureur · Nov 6, 2024lacliniqueducoureur.com
TIVOLI-33 · Nov 6, 2024tivoli-33.org
qualiform.cz · Nov 6, 2024www.qualiform.cz
SMARTS-ENGINEER · Nov 6, 2024www.smarts-engineering.de
HBGJEWISHCOMMUN · Aug 24, 2024www.jewishharrisburg.org
cincinnatipainphysicians · Aug 22, 2024www.cincinnatipainphysicians.com
BARRYAVEPLATING · Aug 22, 2024Here's something encrypted, password is required to continue reading.
RSK-IMMOBILIEN · Aug 22, 2024Here's something encrypted, password is required to continue reading.
Khonaysser · Aug 19, 2024Here's something encrypted, password is required to continue reading.
kbo · Aug 18, 2024Here's something encrypted, password is required to continue reading.
zyxel · Aug 17, 2024Zyxel.eu
hugwi · Aug 14, 2024hugwi.ch
deganis · Aug 13, 2024deganis.fr
SCHLATTNER · Aug 13, 2024SCHLATTNER.de
XPERT · Aug 13, 2024XPERT Business Solutions GmbH
MyFreightWorld · Aug 13, 2024MyFreightWorld
cbmm · Aug 13, 2024cbmm.org
ATP · Aug 13, 2024AZIENDA TRASPORTI PUBBLICI S.P.A.
briju · Aug 13, 2024briju.pl
vindix · Aug 13, 2024vindix.pl
Albatros · Aug 13, 2024Albatros S.r.l.

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .