ZeroHour

warlock

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
79since 2025-06-10
Last post
12-26 18:15UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
energogroup.net · Dec 26, 2025No description provided.
goldenline.com · Dec 26, 2025No description provided.
silanosn.local · Dec 26, 2025No description provided.
bengineered.com.au · Dec 26, 2025No description provided.
mnpease.ca · Dec 26, 2025No description provided.
metro.local · Dec 26, 2025No description provided.
cybervector.co.uk · Dec 26, 2025No description provided.
fabrity.local · Dec 26, 2025No description provided.
miltech.local · Dec 26, 2025No description provided.
mytune.me · Dec 26, 2025No description provided.
alphasys.bo · Dec 26, 2025No description provided.
nartis.ru · Dec 26, 2025No description provided.
sf.walltopia.com · Dec 26, 2025No description provided.
ippm.org · Dec 26, 2025No description provided.
bel.quadra.ru · Dec 26, 2025No description provided.
tein.co.jp · Dec 26, 2025No description provided.
atg.cz · Dec 26, 2025No description provided.
siball.net · Sep 23, 2025all data
chroma.com.tw · Sep 16, 2025all data
ferus-smit.home · Sep 16, 2025all data
jubileelife.com · Sep 16, 2025all data
kmssa.net · Sep 16, 2025all data
webville.net · Sep 16, 2025all data
elssurveying.com · Sep 16, 2025all data
medkar.com · Sep 16, 2025all data
okan.ru · Sep 8, 2025finance data
mffood.com · Sep 1, 2025300G data
gmpc.com · Sep 1, 2025No description provided.
airfastindonesia.com · Aug 25, 2025all user data
infoniqa.com · Aug 18, 2025165g data, including internal documents, financial documents, employee information, CRM database, HR database, SaaS database
hitachi-hta.com · Aug 16, 2025all data
accsnet.com · Aug 16, 2025all data
advion.com · Aug 16, 2025all data
mysecop.com · Aug 16, 2025all data
atcmanufacturing · Aug 16, 2025all data
orange.com · Aug 16, 2025all data
anthembio.com · Aug 16, 2025all data
syspro.com · Aug 16, 2025all data
brightwork.com · Aug 16, 2025No description provided
starsalliance.com · Aug 16, 2025The data has been purchased by other buyers
sipecom.com · Aug 16, 2025all data
wytechnology.local · Aug 16, 2025The data has been purchased by other buyers
webcids.com · Aug 16, 2025all data
rougine-mfg.com · Aug 16, 2025all data
magcpa.com · Aug 16, 2025all data
wfd2027uae.ae · Aug 16, 2025all data
clearybuilding.us · Aug 16, 2025all data
colt.net · Aug 16, 20251 million documents
primrose.com · Aug 16, 2025all data
hitachi.hta.com · Aug 16, 2025all data

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .