ZeroHour

revil

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
41since 2021-09-09
Last post
11-29 00:19UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
kusd.edu · Nov 29, 2022
Sunknowledge Services Inc · Nov 28, 2022
medibank.com.au · Nov 7, 2022
Midea Group · Sep 1, 2022
Asfaltproductienijmegen · Aug 18, 2022
CYMZ · Aug 18, 2022
Visotec Group www.visotec.com · Aug 18, 2022
Stratford University · Aug 18, 2022
www.oil-india.com · Aug 18, 2022
Unicity International · Aug 18, 2022
Ludwig Freytag Group · Aug 18, 2022
Doosan Group · Aug 18, 2022
OptiProERP is a leading global provider of industry-specific ERP solutions for manufacture · Aug 18, 2022
PTT Exploration and Production - 720GB · Oct 15, 2021
ECKERD PERU S.A, INKAFARMA, MIFARMA · Oct 8, 2021
Join us on RAMP · Oct 7, 2021
Ronmor Holdings · Oct 1, 2021
Fimmick CRM Hong Kong (www.fimmick.com) · Sep 30, 2021
Fimmick CRM Honk Kong (www.fimmick.com) · Sep 30, 2021
Spiezle Architectural Group Inc. · Sep 16, 2021
ohiograting.com · Sep 11, 2021
Apex America · Sep 9, 2021
Allen, Dyer, Doppelt, & Gilchrist, P.A. · Sep 9, 2021
Betenbough Homes · Sep 9, 2021
CEC Vibration Products · Sep 9, 2021
ENPOL LLC · Sep 9, 2021
Iaffaldano, Shaw & Young LLP · Sep 9, 2021
angstrom automotive group · Sep 9, 2021
Agile Property Holdings · Sep 9, 2021
Möbelstadt Sommerlad · Sep 9, 2021
Gosiger · Sep 9, 2021
neroindustry.com · Sep 9, 2021
kuk.de / KREBS + KIEFER / 500GB · Sep 9, 2021
KASEYA ATTACK INFO · Sep 9, 2021
Daylesford - BHoldings - Bamford - The Wild Rabbit · Sep 9, 2021
Hx5, LLC · Sep 9, 2021
inocean.no / 2000 GB · Sep 9, 2021
Primo Water · Sep 9, 2021
lstaff.com / atworksprofessional / atworks.com · Sep 9, 2021
South Carolina Legal Services breach · Sep 9, 2021
ensingerplastics.com · Sep 9, 2021

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .