morpheus
ransomware group · aka Morpheus, Morpheus ransomware group, MORPHEUS · unknown (no widely reported attribution to a country, region, or established ransomware ecosystem) · active since 2025 per public leak-site tracker listings; exact first-observed date unknown (this dashboard's tracking window begins 2026-06-25)
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
4
All-time (tracked)
23since 2025-01-07
Last post
07-30 09:01UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Morpheus is a low-volume ransomware and data-extortion operation that publishes victim claims on a Tor leak site, consistent with a double-extortion model. Its claims span a wide geographic and sectoral mix, including entities in India, Singapore, Denmark, Tanzania, the United States, and Mexico, suggesting largely opportunistic targeting rather than a concentrated industry or regional focus. Public vendor research on the group is sparse: initial access vectors, affiliate structure, malware tooling, and financial scale have not been established in widely cited reporting. Dashboard telemetry shows sporadic posting (4 victims in the last 90 days, last post 2026-07-30), so absence from headlines likely reflects low posting volume rather than dormancy.
Tactics & tooling
- Operates a Tor-hosted leak site naming victims and threatening publication of stolen data (double extortion)
- Leak-site claims cover multiple regions and industries in quick succession, consistent with opportunistic targeting
- Some posts include limited detail, limiting third-party verification of individual breaches
- Initial access vector: unknown (no widely reported details)
- Encryption and payload techniques: unknown (no widely cited public malware analysis)
- No CVE exploitation has been publicly tied to this group
Targeted sectors
professional services / market researchIT serviceslegal servicesfinancial servicesmanufacturing / industrialhospitality
Notable public victims
Hansa Research Group Pvt. Ltd (India-based market research firm; leak-site claim), 3I Infotech (India-based IT services provider; leak-site claim), Delegal Poindexter & Underkofler, P.A. (US law firm; leak-site claim), Sunset World Resorts (Mexico-based resort operator; leak-site claim), Kyowa Singapore Pte Ltd (Singapore-registered company; leak-site claim), Baytech A/S (Denmark-registered company; leak-site claim), HDFC FUND (listed by the group; relationship to India's HDFC brand unverified), Yue Ki Industrial (leak-site claim)
Estimated earnings
No public figure.
Leak-site victims23 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Yue Ki Industrial | · Jul 30, 2026 | Website: yueki.com.tw Revenue: $21 Million Yue Ki Industrial is a manufacturing company that creates high-quality industrial products for businesses. They work with metal, plastic, and other materials to build custom parts and components. Data: Human Resources (HR) & Personal Identifiable Information (PII) NDA, Client Penalties & Quality Defect Records Intellectual Property (IP) & Engineering CAD Data Supply Chain, Procurement & Manufacturing Secrets IT Infrastructure & Database Backups The volume of retrieved data is 177 GB |
| Kyowa Singapore Pte Ltd | · Jul 22, 2026 | Website: kyowasingapore.com Revenue: $15 Million Founded in 1979 and headquartered at Benoi Road, Singapore, they primarily supply global consumer electronics, grooming, and automotive industries. Data: HR/Employee Data Client/Engineering Data Financial/Procurement Data Quality/Compliance Data Manufacturing/Process Data Administrative/Operational Data Immigration/Work Pass Data Tax/IRAS Compliance Data The volume of retrieved data is 143 GB |
| Hansa Research Group Pvt. Ltd | · Jul 6, 2026 | Website: hansaresearch.com Revenue: $22 Million Hansa Research is a global, full-service market research and consumer insights agency. They help companies make data-driven decisions by providing market intelligence, brand strategy, customer experience (CX) analytics, and media effectiveness.Headquartered in Mumbai, India, they operate globally with offices in the USA, Singapore, the UAE, and Bangladesh. Data: Hansa Cheetah Database PAN of employees and companies IDs and Aadhaar Client Lists + Working Files and NDAs Payment and Financial Terms Company Strategy and IP |
| Delegal Poindexter & Underkofler, P.A. | · Jun 25, 2026 | Website: protectingcareers.com Revenue: $5 Million Delegal Poindexter & Underkofler provides highly specialized legal services to employees with employment law concerns.They represent professionals, executives, and public employees in labor, employment law, and administrative issues. Data: Plaintiff Information (containing personal identifiers, employment history, and contact details to establish the client) Active Case Files (encompassing pleadings, motions, and evidence for employment lawsuits like wrongful termination) Confidentially Marked Emails (consisting of privileged attorney-client communications and sensitive strategy protected from disclosure) and other Employee PC Data |
| HDFC FUND | · Jun 10, 2026 | Website: hdfcfund.com Revenue: $427.8 Million HDFC Asset Management Company Limited (HDFC AMC) is a leading publicly traded investment manager in India, operating as the asset management arm of HDFC Bank Limited. Founded in 1999 and headquartered in Mumbai, the firm serves as the investment manager for HDFC Mutual Fund, which ranks among the largest mutual fund houses in the country. Data: Portfolio & Trading Documentation Investor & Distributor Data Regulatory, Compliance & Audit Files Strategic & Commercial Documentation Financial, Accounting & Tax Records Governance, HR Data & Internal Controls Company Portfolio & Holdings Corporate Research & Public Data Top management’s personal records and documents SQL Databases, HDFCAMC applications source code The sale of the data is currently in progress, along with access to the corporate network. The volume of retrieved data is 680 GB |
| 3I INFOTECH | · Jun 8, 2026 | Website: 3i-infotech.com Revenue: $96.8 Million 3i Infotech, incorporated in 1993 as 'ICICI Investors Services Limited' and initially an ICICI subsidiary until 2002, is an Indian public global information technology company headquartered in Navi Mumbai. It provides IT services and software solutions, including digital transformation, cloud computing, and cybersecurity, utilizing technologies like AI and blockchain. The company serves over 1,200 customers in more than 50 countries from 24 offices across 12 nations. |
| BAYTECH A/S | · May 14, 2026 | Website: baytech.dk Revenue: $5 Million Baytech A/S is a Danish industrial engineering company that provides crane systems, material handling equipment, and logistics solutions for industrial clients. It combines engineering, installation, and service, delivering both standard and custom-built systems. The company also works with automation technologies, including mobile robots and warehouse solutions. The volume of retrieved data is 110 GB |
| GGI | · Apr 21, 2026 | Website: ggitokiomarine.com Website: ggipinsurance.com Revenue: $19.2 Million Provides comprehensive general and life insurance solutions, including motor, fire, marine, and specialized health coverage. Established in 2012, the firm partners with international companies like Tokio Marine and Nippon Life to offer tailored coverage options for individuals and corporations. Data: Financial Documents Employee records Contracts with customers and suppliers Strategic Plans Confidential data Personal data Insurance compensations The volume of retrieved data is 325 GB |
| SBCTANZANIA | · Mar 30, 2026 | Website: sbctanzania.co.tz Revenue: $42.5 Million SBC Tanzania Limited, established in 2001, is a prominent beverage manufacturer and distributor in Tanzania, dedicated to producing PepsiCo brands like Pepsi, Mirinda, Mountain Dew, and Evervess. Operating four production plants (Dar es Salaam, Mwanza, Arusha, Mbeya), they focus on high-quality production, employing 1,000–5,000 staff to serve the local market. |
| SURTECHINC | · Mar 20, 2026 | Website: surtechinc.kr Revenue: $5 Million Company is a leader in the plating industry, leveraging our accumulated experience and technological prowess to provide the highest quality and service. Through continuous research and development and innovation, we create new value in the plating industry and live up to our customers' trust.As part of this innovation, we are pioneering the adoption of cutting-edge technologies, such as HMI systems, to enhance production efficiency and quality. Our cutting-edge technology and expertise, in harmony with our traditions, are the driving force behind providing differentiated solutions to our customers. |
| New publication | · Mar 20, 2026 | — |
| SUNSETWORLDRESORTS | · Jan 29, 2026 | Website: sunsetworldresorts.com Revenue: $593 Million Sunset World Group is a Mexican family business founded by some of the pioneers of Cancun who helped turn it into the most sought-after tourist destination worldwide. Sunset World Group has more than 30 years of experience in the hospitality industry and as sincere passion for environmental conservation, which is why it implemented an Energy Efficiency Program by substituting supply technologies in its six hotels in Cancun and The Riviera Maya. Data: Contracts with customers and suppliers Financial Documents Oracle databases Employee records Legal documents Additionally, we have an access the company’s live production databases. An access can be sold either independently or bundled with other compromised information and offline database extracts. The databases contain sensitive personal information belonging to clients located in the United States, Canada, the European Union, and other jurisdictions. The volume of retrieved data is 257 GB |
| VALLEREDONDO | · Dec 27, 2025 | Website: valleredondo.com.mx Revenue: $50 Million Family owned, founded in 1964 by Don Luis Ferruccio Cetto, right in the center of México, in Aguascalientes. With more than 60 years specialized in manufacturing, commercialization and distribution of different categories of beverages, Valle Redondo is consolidated as one of the Top producers, in Mexico and for many other countries, growing a robust portfolio of wines, spirits, ciders, juices, nectars, alternative and functional beverages and fruit concentrates. Data: Financial Documents Customer documents Business planning Employee records Legal documents HR Documents Logistics Marketing Projects The volume of retrieved data is 500 GB |
| SCIPIONI | · Dec 22, 2025 | Website: scipioni.be Revenue: $5 Million Scipioni is a company specializing in the distribution of petroleum products since 1974. Located in the Charleroi region.Scipioni is a company that supplies fuels and combustibles to both individuals and businesses in the Hainaut province. Data: Financial Documents Confidential agreements Accounting Personal information |
| Teamglobal | · Nov 20, 2025 | Website: teamglobal.com Revenue: $6.3 Million Premier contract and direct hire staffing services. 30 years of industry experience in aerospace and light industrial and an extensive client list. Data: Financial Documents Personal data of clients Confidential agreements Accounting HR |
| Landmark Properties | · May 20, 2025 | Website: landmarkproperties.com Revenue: $1.5 Billion Landmark Properties is a fully integrated real estate firm specializing in development, construction, management, investment, and consulting of high-quality residential communities. Data: Financial Documents Personal data of clients Confidential agreements Accounting Development Marketing Properties Construction Active Deals HR To clarify the details, you can register and contact the administrator in the chat. The amount of extracted data ready for sale is about 1.2 TB. |
| Latronica Law Firm, P.C | · Apr 7, 2025 | Website: latronicalaw.com Revenue: $5 Million The Latronica Law is a firm specializing in personal injury/negligence cases, criminal defense, and divorce/family law, with a focus on maximizing recoveries and providing personal attention to clients. Having practiced law since 1992, they are experienced in maximizing recovery by filing lawsuits for clients who have been injured as a result of the negligence of others. They have obtained millions of dollars in settlements and judgments on behalf of our clients. Data: Confidential docs Personal data of clients Case disbursment report Various types of records relating to court cases To clarify the details, you can register and contact the administrator in the chat. |
| Metal Sales Manufacturing Corporation | · Apr 7, 2025 | Website: metalsales.us.com Revenue: $270.1 Million Metal Sales is the largest manufacturer of metal roofing, wall, and building systems in the United States, also offering metal fabrication materials, and serving the commercial, agricultural, and residential construction industries.With over 60 years of experience, Metal Sales is the nation's largest manufacturer of metal roofing, wall, and building systems. Data: HR Resume Financial Documents Personal information Confidential agreements Contracts with customers and suppliers To clarify the details, you can register and contact the administrator in the chat. |
| Alora Pharmaceuticals, LLC | · Apr 1, 2025 | Website: alorapharma.com acellapharma.com avionrx.com osmotica.com sovpharm.com trigenlab.com verticalpharma.com Revenue: $337.4 Million Alora Pharmaceuticals, LLC is a parent company of six specialty pharmaceutical and pharmaceutical manufacturing companies, headquartered in Alpharetta, GA, that focuses on developing, marketing, and distributing both branded and generic medicines, with a mission to address patient needs with innovative solutions. Data: Project Management HR Paymnent IT |
| Dinizulu Law Group LTD | · Feb 25, 2025 | Website: dinizululawgroup.com Revenue: $5 Million Dinizulu Law Group, Ltd is a personal injury law firm based in Chicago, dedicated to achieving the best outcomes for clients through a compassionate approach. With over 50 years of combined experience, they specialize in various practice areas including nursing home abuse, car accidents, medical malpractice, and wrongful death. The firm's founder, Yao Dinizulu, brings a unique sensitivity to the needs of clients from diverse backgrounds. They pride themselves on providing personalized service and offer free consultations to ensure that their clients feel supported and informed. Clients: Lil Durk, OTF Inc. Davon Brinson Kimberly Katz Lauri Ogden Michael Mercier Morgan Howard George Daniels many others Data: Confidential docs Finance documents Business Plans Resume Personal data of employees Personal data of clients Personal and confidential data of celebrities (Durk Banks, etc.) Videoconference depositions Various types of records relating to court cases |
| LYNXSPA | · Jan 17, 2025 | Website: lynxspa.com Revenue: $292.5 Million Lynx, the Partner for Digital Transformation The Lynx Group specialises in the design and implementation of digital solutions, supporting large organisations operating in the Utilities, Finance, Insurance, and PA sectors. With a turnover of EUR 130 million and over 1250 employees, Lynx aims to intercept and anticipate the market changes imposed by the new digital paradigms, supporting customers in this phase of radical organisational and IT transformation. The Group’s service offering is structured to meet all customer needs: management and/or technical consultancy, design, and implementation of turnkey solutions on market or open technologies, application maintenance, sale of proprietary or third-party products on premise or through periodic subscriptions. Data: Confidential docs Sales data Finance documents Business Plans Resume Personal data of employees Oracle, Microsoft sql database backups Full Gitlab backup Tech data (network scheme, Remote Desktop Manager backup, etc.) To clarify the details, you can register and contact the administrator in the chat. |
| Arrotex Pharmaceuticals | · Jan 7, 2025 | Website: https://dbghealth.com.au/arrotex/ Revenue: $92 Million The extent of the cybersecurity incident is not completely revealed in the published article. The volume of extracted data, ready for sale or publication, is nearly 2.5 TB. Confidential docs Recruitment docs Partners info Monthly case reviews Sales data Distributors info Agreements Finance documents Documents pertaining to other companies Business Plans To clarify the details, you can register and contact the administrator in the chat. |
| Pus Gmbh | · Jan 7, 2025 | Website: pus-gmbh.eu Revenue: $5 Million The P&S GmbH & Co. KG has specialized as a manufacturer of electronic products and solutions for the time management. Time management includes time recording, access control, scheduling and plant data collection / project time and is supervised by us from Gera - Thüringen and Putzbrunn near Munich - Bayern. In addition, we work with numerous partners and freelancers throughout Germany. Clients: smava.de tobol.de communis.gmbh acolad.com diakonie-doppelpunkt.de brunner-konstruktion.de enertec-kraftwerke.de Data: Technical and personal documents Customer database Backups of customer databases To clarify the details, you can register and contact the administrator in the chat. |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .