ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
planetgroup.co.il · Dec 19, 2024
choicemg.com · Dec 17, 2024
medisecure.com.au · Dec 17, 2024
redknee.com · Dec 17, 2024
nbleisuretrust.org · Dec 17, 2024
www.specialtree.com · Dec 16, 2024
bushandburchett.com · Dec 16, 2024
SWDAKOTAH.COM · Dec 16, 2024
scania.pl · Dec 16, 2024
www.aflak.com.sa · Dec 16, 2024
Levinlaw.com · Dec 14, 2024
tekni-plex.com · Dec 13, 2024
www.hashem-contracting.com · Dec 13, 2024
recope.go.cr · Dec 12, 2024
tectaamerica.com · Dec 10, 2024
womenscare.com · Dec 10, 2024
greenscape.us.com · Dec 10, 2024
mpdory.com · Dec 9, 2024
www.lasalleinc.com · Dec 9, 2024
inia.es · Dec 9, 2024
pro-mec.com · Dec 6, 2024
hanwhacimarron.com · Dec 5, 2024
frigopesca.com.ec · Dec 5, 2024
islandphoto.com · Dec 4, 2024
troxlerlabs.com · Dec 4, 2024
www.d47.org · Dec 4, 2024
internetway.com.br · Dec 4, 2024
KHKKLOW.com · Dec 4, 2024
www.iscinc93.com · Dec 4, 2024
www.fibrogen.com · Dec 4, 2024
www.z2data.com · Dec 4, 2024
www.giorgiovisconti.it · Dec 4, 2024
www.kiswire.com · Dec 4, 2024
www.dalgroup.com · Dec 4, 2024
www.goethe-university-frankfurt.de · Dec 4, 2024
www.wsgcpa.com · Dec 4, 2024
www.sefiso-atlantique.fr · Dec 4, 2024
marietta-city.org · Dec 4, 2024
westbornmarket.com · Dec 4, 2024
www.lasalle.com · Dec 4, 2024
shapesmfg.com · Dec 1, 2024
everde.com · Dec 1, 2024
qualitybillingservice.com · Dec 1, 2024
tascosaofficemachines.com · Dec 1, 2024
costelloeye.com · Dec 1, 2024
www.aras-group.ae · Nov 29, 2024
ppotts.com · Nov 29, 2024
corenroll.com · Nov 28, 2024
alleghenycontract.com · Nov 27, 2024
tappi.org · Nov 27, 2024

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .