team underground
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
27since 2024-05-01
Last post
08-15 16:09UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims27 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| SFA Engineering | · Aug 15, 2025 | — |
| www.sfa.co.kr | · Aug 15, 2025 | — |
| GMORS Co., Ltd | · Jun 25, 2025 | — |
| semex.com | · Apr 16, 2025 | — |
| shengyusteel.com | · Apr 8, 2025 | — |
| Afa Systems Ltd. | · Feb 18, 2025 | — |
| Simmtech Co., Ltd. | · Dec 16, 2024 | — |
| hcsgcorp.com | · Oct 25, 2024 | — |
| Casio Computer Co., Ltd | · Oct 10, 2024 | — |
| ramservices.com | · Jul 3, 2024 | — |
| Ethypharm | · Jul 1, 2024 | — |
| A-Line Staffing Solutions | · Jun 17, 2024 | — |
| belcherpharma.com | · Jun 12, 2024 | — |
| CentralSecurities.com | · Jun 10, 2024 | — |
| www.belcherpharma.com | · May 18, 2024 | — |
| kc.co.kr | · May 3, 2024 | — |
| bulldogbag.com | · May 1, 2024 | — |
| frenckengroup.com | · May 1, 2024 | — |
| synology.com | · May 1, 2024 | — |
| tpa-group.sk | · May 1, 2024 | — |
| Triathlon.group | · May 1, 2024 | — |
| awwg.com | · May 1, 2024 | — |
| KyungChang | · May 1, 2024 | — |
| Y. Hata & Co., Ltd. | · May 1, 2024 | — |
| Skender Construction | · May 1, 2024 | — |
| Creative Business Interiors | · May 1, 2024 | — |
| cochraneglobal.com | · May 1, 2024 | — |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .