ox thief
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
1since 2025-03-03
Last post
03-03 23:24UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims1 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Corp_Broker Educational Sales & Training | · Mar 3, 2025 | Employee personal data, client company information, financial reports, insurance forms, confidential contracts and company databaseses and etc... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .