ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
www.gbricambi.it [UPDATE] · Jun 20, 2024
www.invisio.com · Jun 20, 2024
<www.invisio.com> · Jun 19, 2024
www.clevo.com.tw<Disclose> · Jun 19, 2024
www.gbricambi.it · Jun 18, 2024
www.liderit.es · Jun 17, 2024
www.racalacoustics.com [UPDATE] · Jun 17, 2024
liderit.es&cis21.com · Jun 17, 2024
www.domainatcleveland.com · Jun 17, 2024
parlorenzo.com · Jun 17, 2024
www.racalacoustics.com · Jun 13, 2024
www.clevo.com.tw<UPDATED> · Jun 12, 2024
www.ham.org.br · Jun 11, 2024
www.novabitsrl.it · Jun 11, 2024
smicusa.com · Jun 11, 2024
www.ugrocapital.com · Jun 10, 2024
www.crezit.com · Jun 6, 2024
www.ykp.com.br · Jun 4, 2024
www.al-shefafarm.ro(SOLD) · Jun 4, 2024
www.headwaterco.com · Jun 4, 2024
www.shootinghouse.com.br · Jun 4, 2024
www.merchant.id · Jun 4, 2024
www.spmundi.com.br · Jun 4, 2024
www.siea.sk · Jun 4, 2024
www.dvttechnologyltd.com · Jun 4, 2024
www.rekamy.com · Jun 4, 2024
www.go4kora.tv · Jun 4, 2024
www.scadea.com · Jun 4, 2024
www.computan.com · Jun 4, 2024
www.kovra.com.my · Jun 4, 2024
www.lapastina.com · Jun 4, 2024
www.industrialdealimentos.com · Jun 4, 2024
www.wisd.net · Jun 4, 2024
www.pgesco.com · Jun 4, 2024
www.avantit.no · Jun 4, 2024
www.constelacion.com.sv · Jun 4, 2024
www.agenciahost.com · Jun 4, 2024
www.aretusamilano.it · Jun 4, 2024
www.betteraccountingsolutions.com · Jun 4, 2024
www.hcisystems.net · Jun 4, 2024
www.nrshealthcare.com · Jun 4, 2024
www.farmaciaflorio.com · Jun 4, 2024
www.skywaycoach.ca · Jun 4, 2024
www.cyncsolutions.com · Jun 4, 2024
www.robesoncoso.org · Jun 4, 2024
www.eebpsa.com.co · Jun 4, 2024
www.grupocuevas.es · Jun 4, 2024
www.fabricainfo.com · Jun 4, 2024
nepa.gov.af&dfr.gov.af · Jun 4, 2024
www.harmanrealtors.com · Jun 4, 2024

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .