kraken
ransomware group · aka Kraken, Kraken ransomware group · unknown; 2025 vendor reporting links the group to former BlackSuit/Royal (ex-Conti) personnel · active since mid-2025 (per public vendor reporting; exact first-activity date unknown)
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
1
All-time (tracked)
27since 2025-02-09
Last post
08-11 15:33UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Kraken is a ransomware and data-extortion operation first widely reported in mid-2025, which publishes victims on a Tor leak site; per this dashboard it shows one tracked listing, with the most recent post on 2026-08-11 and no new posts since. Multiple vendor reports have linked Kraken to the BlackSuit/Royal (ex-Conti) ransomware lineage, citing code and branding similarities and reports that the group recruited former BlackSuit affiliates with revenue-share offers following 2025 law-enforcement seizures of BlackSuit infrastructure. 2025 vendor reporting described encryptors covering Windows and Linux/ESXi and, less commonly for ransomware operations, a macOS variant. Listed victims span multiple regions and sectors, and no group-specific earnings estimates appear in public blockchain-analytics or vendor reporting. The name should not be confused with the Kraken cryptocurrency exchange or the 2018 'KraKen' ransomware, a Dharma-family variant.
Tactics & tooling
- Ransomware-as-a-service affiliate model; 2025 reporting described recruiting former BlackSuit affiliates with revenue-share offers
- Double extortion - encrypt systems and exfiltrate data, with victim listings published on a leak site
- Encryptors reported for Windows and Linux/ESXi; some 2025 reporting also described a macOS variant
- Reported code and branding similarities to the BlackSuit/Royal (ex-Conti) family
- No single initial-access vector widely attributed; access methods appear affiliate-dependent (unknown)
- Victim selection appears broad across sizes and sectors, consistent with affiliate-based operations
Targeted sectors
ManufacturingConstructionTelecommunicationsIT/technology retailProfessional servicesAutomotive
Notable public victims
www.humac.dk, www.mada.com.kw, www.optyma.co.uk, www.selt-sistemi.com, www.ctntelco.com, www.georgeallenconstruction.com
Estimated earnings
No public figure.
Leak-site victims27 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| - | · Aug 11, 2026 | GINGER CONSULTING Coming soon...... |
| www.pointcag.com | · Nov 13, 2025 | POINT provides expert Construction Management Consulting and Litigation Services with objectivity and reliability. http://o5... |
| www.ronvil.com | · Oct 16, 2025 | Ronemus & Vilensky LLP is a New York-based law firm specializing in personal injury, civil rights, medical malpractice, and acci... |
| The Last Haven Board | · Sep 3, 2025 | In an era where digital communication is both ubiquitous and increasingly scrutinized, the concept of online anonymity has becom... |
| www.mada.com.kw | · Jul 25, 2025 | Mada Communications formerly known as ARAB TELECOMMUNICATIONS (ArabTel) is a leading service provider, offering wireless broadba... |
| www.optyma.co.uk | · Jul 22, 2025 | Established in 1987, Optyma is a principle provider of integrated security systems. Our expertise in the design, implementation,... |
| www.pomerandboccia.com | · Jul 15, 2025 | Pomer & Boccia has been in business since 1989 and operates a debt recovery division located in Woodbridge, Ontario near the int... |
| www.wheelsauto.com | · Jul 10, 2025 | "For over 35 years Wheels Automotive Dealer Supplies has been Canada’s leader in Automotive retail products - as a manufacturer,... |
| www.georgeallenconstruction.com | · Jul 10, 2025 | George Allen Construction specializes in providing innovative solutions for railroad construction projects, catering to the un... |
| www.selt-sistemi.com | · Jul 6, 2025 | The first part of leak http://t3uouzfvsaqurb2rzoe2mkpetp54d7lgtl45ply34v5lugsnzysmkhid.onion/... |
| www.ctntelco.com | · Jul 6, 2025 | Cyber security, cloud services? Hah... ok Pwned http://zq3k4odlfpbzc5y4sxqgolivelxepceaakru3xqo4ll2czmvvtek2ryd.onion/... |
| www.humac.dk | · Jul 4, 2025 | Humac was established in 1989 and has sold and serviced Apple products ever since. Humac is to bring the HUman and MAC's together, and it has since 1989 been our goal to provide the best Customer experience through the purchase and servicing of Apple products. Humac is the largest independent Apple Premium Partner in the Nordic region. The head office is located in Copenhagen, denmark, where also our customer service responds to inquiries and calls from all of our customers. Humac A/S is owned by the Italian C&C, Europe's largest Apple Premium Partner with 122 stores in Europe (Italy, France, Sweden, Finland, Estonia, Latvia, and Denmark). Humac is the only company in Denmark is certified by Apple as Apple Premium Partner (APP), and it means that we have met Apple's highest level of sales and service autorisationer and, therefore, we live up to Apple's claims about the exposure of the products and the level of education of our employees. http://kxntyq6yyfomjoqqya6px7pgc6mbfcbaejryxhiwpntcnlr7hopqj3yd.onion/ |
| www.prival.com | · Jul 4, 2025 | Banking · Panama http://yjsknaecbmhvrsagrcwqelpojnbcllt6v27vxebxhnotd3wu67onc5qd.onion |
| www.skcounsel.com | · Jul 4, 2025 | Scott & Kraus, LLC is a boutique law firm located in Chicago specializing in commercial finance. The firm serves a diverse range of clients, from start-ups to Fortune 100 companies across the United States, and is dedicated to providing high-quality legal representation. Their experienced attorneys utilize a collaborative approach to deliver superior outcomes and build lasting relationships with clients. With a strong focus on professionalism and transparency, Scott & Kraus, LLC is committed to protecting their clients' interests and ensuring efficient business operations. http://fk5c3gxraixjl3p7zacchn4jvew35vxo5xpedqf2qtlynsheqymampid.onion |
| www.continental.aero | · Jul 4, 2025 | www.continental.aero Continental Aerospace Technologies is a global leader in General Aviation. They are the only company to offer a full range of gasoline and Jet-A engines, as well as avionics services. Continental Aerospace Technologies was founded in 1905 and is based in Alabama, the United States. http://ab2v4xzffr24pdmswqzrbg45pwsget4h7eyd4swxewuqbxmlwcju7lad.onion |
| www.sanmarti.es | · Jul 4, 2025 | www.sanmarti.es Transportes Sanmarti SA http://3cxvgnwvbzzfm2abzxidi76uib53vsjudsavgzm4viaj26drkcdl6wad.onion/ |
| www.anubis-cosmetics.com | · Jul 4, 2025 | www.anubis-cosmetics.com ANUBIS COSMETICS, S.L. http://cjhuttkivmtrf6itrmyoqnxw55isy3dh6u5ifc3fnhajp7lwn5deflid.onion/ |
| www.floralimited.com | · Jul 4, 2025 | www.floralimited.com Flora Limited http://wkqvktnmr2slazl76opbkdli4ia6gznhxln2z5wny54hf4kzjwgqvxyd.onion |
| www.ultrarapit.net | · Jul 4, 2025 | www.ultrarapit.net ULTRA RAPIT, S.L. http://ko3lwb6glib74kmol5ov5cphabwqmifb5lnjw4bvj75jpfigrfbn7gid.onion/ |
| www.kvhealth.net | · May 12, 2025 | — |
| www.circul-aire.com, www.dectron.com | · May 12, 2025 | — |
| ctntelco.com | · Feb 9, 2025 | — |
| www.fudpucker.com | · Feb 9, 2025 | — |
| www.mgl.law | · Feb 9, 2025 | — |
| www.cdprojekt.com | · Feb 9, 2025 | — |
| www.cisco.com | · Feb 9, 2025 | — |
| Kitty cookies | · Feb 9, 2025 | — |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .