ZeroHour

pysa

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
308since 2021-09-09
Last post
12-29 17:34UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
Rafaela Alimentos · Sep 9, 2021
ASE Bucuresti · Sep 9, 2021
Heartland · Sep 9, 2021
Winters Independent School District · Sep 9, 2021
IQA · Sep 9, 2021
Bakers S.A. Limited · Sep 9, 2021
Econocom · Sep 9, 2021
Avelia · Sep 9, 2021
Mongoldford · Sep 9, 2021
CWF Group Inc. · Sep 9, 2021
Telhai · Sep 9, 2021
Ayuntamiento de Guadarrama · Sep 9, 2021
Hackney Council · Sep 9, 2021
Market Pioneer · Sep 9, 2021
Roughrider Internation Ltd. · Sep 9, 2021
Bruce Turner · Sep 9, 2021
Mendes Júnior · Sep 9, 2021
Affinity Education · Sep 9, 2021
Gemitchellco · Sep 9, 2021
Rontis Medical · Sep 9, 2021
Mirai · Sep 9, 2021
Tech 2000 · Sep 9, 2021
Benchmark Family Services · Sep 9, 2021
Dayliff · Sep 9, 2021
Merchant Taylors' School · Sep 9, 2021
Riggins Company · Sep 9, 2021
St. Margaret’s Hospice Care · Sep 9, 2021
Bene Ficencia · Sep 9, 2021
Grupo Infoar · Sep 9, 2021
McKinney · Sep 9, 2021
Overlake Obstetricians & Gynecologists,PC · Sep 9, 2021
St. Mary School Hyde Park · Sep 9, 2021
Torello Moving Strategies · Sep 9, 2021
Max. Aarts · Sep 9, 2021
Mid-Florida Pathology · Sep 9, 2021
Serinus Energy Plc · Sep 9, 2021
Outwest Express LLC · Sep 9, 2021
King Henrys · Sep 9, 2021
Summit Appliance · Sep 9, 2021
Brickhaus · Sep 9, 2021
Finance Evolution · Sep 9, 2021
Nama Khoi Municipality · Sep 9, 2021
Thinkware · Sep 9, 2021
Brookfield Public Schools · Sep 9, 2021
Salesianum School · Sep 9, 2021
Provenza Floors · Sep 9, 2021
CCS · Sep 9, 2021
Palos Community Consolidated School District 118 · Sep 9, 2021
DFW Communications,Inc. · Sep 9, 2021
The FitzWimark School · Sep 9, 2021

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .