majinahanashi
ransomware group · aka unknown · unknown · active since 2026-06-27
Victims · 7d
0flat
Victims · 30d
7active targets
Victims · 90d
22
All-time (tracked)
22since 2026-06-27
Last post
09-01 10:44UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Majinahanashi is a data-extortion group tracked on this dashboard via its dedicated leak site, with the first recorded post on 2026-06-27 and the most recent post on 2026-09-01. It operates at a modest but steady cadence, listing 22 victims in roughly ten weeks, though it posted no new victims in the last seven days. Its listed victims span multiple sectors and regions, including hotels in Malaysia and Indonesia and organizations in Europe. Public vendor, law-enforcement, and blockchain-analytics reporting on the group is sparse: its country of origin, affiliate model, ransomware strain lineage, and initial access techniques are unknown, and no specific CVEs have been publicly attributed to it. No public estimates of the group's criminal earnings are available.
Tactics & tooling
- Operates a dedicated data-leak site that publicly names victims, consistent with extortion via threatened data publication.
- Posts victims at a steady rate of roughly 1-2 per week rather than in large bursts.
- Targets multiple different sectors within the same period, suggesting opportunistic rather than industry-focused campaigns.
- Victim footprint spans Southeast Asia and Europe (e.g., Malaysia, Indonesia, Lithuania, and Switzerland).
- Initial access vector: not publicly documented.
- Encryption/deployment tooling and affiliate structure: not publicly documented.
Targeted sectors
hospitalityindustrial/manufacturinghealthcare/life sciencesbusiness/professional services
Notable public victims
TERRACOM, MONTCAU, PCA Group Sdn. Bhd., Grand Ion Delemen Hotel, The Margo Hotel, Ion Delemen Hospitality, CALICHE, ETICOD, UAB Biotecha, ALTAIR
Estimated earnings
No public figure.
Leak-site victims22 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| TERRACOM & MONTCAU | · 14d ago | PUBLICATION SCHEDULED. Publication scheduled: 2026-09-05T08:08:00Z Package: 896 MiB / 6341 files |
| TERRA*** & MON**** | · 17d ago | PUBLICATION SCHEDULED. Publication scheduled: 2026-09-05T08:08:00Z Package: 896 MiB / 6341 files |
| PCA Group Sdn. Bhd. | · 21d ago | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-28T22:03:00Z Package: 2.5 GiB / 1844 files |
| PCA ***** | · 25d ago | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-28T22:03:00Z Package: 2.5 GiB / 1844 files |
| Grand Ion Delemen Hotel | · 27d ago | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-26T16:34:00Z Package: 4.0 GiB / 5045 files |
| The Margo Hotel | · 27d ago | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-26T20:49:00Z Package: 4.6 GiB / 8080 files |
| Ion Delemen Hospitality | · 27d ago | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-26T16:34:00Z Package: 4.0 GiB / 5045 files |
| CALICHE | · Aug 11, 2026 | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-18T03:03:00Z Package: 22.9 GiB / 39200 files |
| ETICOD | · Aug 9, 2026 | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-16T00:30:00Z Package: 1.6 GiB / 5730 files |
| UAB Biotecha | · Aug 8, 2026 | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-15T22:12:00Z Package: 21.2 GiB / 20888 files |
| ALTAIR | · Aug 8, 2026 | PUBLICATION SCHEDULED. Publication scheduled: 2026-08-15T01:01:00Z Package: 23.9 GiB / 84251 files |
| Camandona SA | · Aug 4, 2026 | TARGET: https://www.camandona.ch/ REVENUE: $61.7M EMPLOYEES: 200 Camandona SA is a major Swiss construction and road-building company founded in 1948 and based in the French-speaking canton of Vaud. It specializes in asphalt paving, road construction, civil engineering, building demolition, and the recycling of construction materials. HQ: Rue de Cossonay 30, 1023 Crissier, Switzerland Phone: +41 21 632 89 00 Email: [email protected] Website: https://www.camandona.ch/ Package: 12.1 GiB / 9584 files File manager: http://cc666mzpsjhn3yi6t7hqkwi5thjeh7prxg3mndpceb7xtchsbsmct3ad.onion/dl/47c27aa75b082421627fc9a7491eaabd |
| Goccia S.p.A. | · Aug 3, 2026 | TARGET: https://www.joygioielli.com/ https://www.gocciagioielli.com/ REVENUE: €19.2M EMPLOYEES: ~ Package: 320 MiB / 3557 files |
| SCHMITZ & NITTENWILM | · Aug 3, 2026 | TARGET: schmitz-nittenwilm.de REVENUE: €13,8M EMPLOYEES: ~ Package: 3.2 GiB / 886 files |
| CARIBE / SUBRA | · Jul 11, 2026 | TARGET: kalimancaribe.com & subra.bg. REVENUE: ~ EMPLOYEES: ~ Package: 19.7 GiB / 21311 files |
| WONDR DIAMONDS & D GEM MOUNT | · Jul 8, 2026 | TARGET: wondrdiamonds.com & gemmount.com REVENUE: $12m USD EMPLOYEES: 200+ Package: 2.5 GiB / 247 files |
| CDA | · Jul 8, 2026 | TARGET: https://centrodiagnosticocda.it/ REVENUE: ~ EMPLOYEES: ~ Package: 73.4 GiB / 135426 files |
| GRUPO STARFOODS | · Jul 6, 2026 | TARGET: starfoods.pt REVENUE: ~ EMPLOYEES: ~ Package: 4.1 GiB / 3420 files |
| SON-VIDEO | · Jul 6, 2026 | TARGET: Son-Video.com REVENUE: $54M EMPLOYEES: ~51-200 employees Package: 2.5 GiB / 10382 files |
| KT RESTAURANT | · Jul 2, 2026 | TARGET: ktr.co.th REVENUE: ~$55M USD EMPLOYEES: ~ Package: 777 MiB / 1853 files |
| BONJOUR GROUP | · Jul 2, 2026 | TARGET: bonjourgroup.net, bonjourretail.com REVENUE: $57.8 Million EMPLOYEES: 501-1,000 employees Package: 3.1 GiB / 5620 files |
| PIO PIO | · Jun 27, 2026 | TARGET: piopio.com.co REVENUE: $5m EMPLOYEES: 33 staff Package: 3.1 GiB / 6306 files |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .