warlock
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
79since 2025-06-10
Last post
12-26 18:15UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims79 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| tagorg.com | · Aug 16, 2025 | all data |
| nszi | · Jul 28, 2025 | The customer has not paid, and there are no other buyers within the validity period, please enjoy your data |
| kipl | · Jul 28, 2025 | The customer has not paid, and there are no other buyers within the validity period, please enjoy your data |
| getdomain | · Jul 28, 2025 | The data has been bought by other buyers (not victims) |
| houxt | · Jul 28, 2025 | The data has been bought by other buyers (not victims) |
| houra | · Jul 28, 2025 | The data has been bought by other buyers (not victims) |
| STRGOME | · Jul 28, 2025 | The data has been bought by other buyers (not victims) |
| argeninta | · Jul 28, 2025 | The data has been bought by other buyers (not victims) |
| woodboure | · Jul 28, 2025 | The data has been bought by other buyers (not victims) |
| gmtaconline | · Jul 28, 2025 | The data has been bought by other buyers (not victims) |
| currimjee | · Jun 10, 2025 | No description provided |
| via-optronics | · Jun 10, 2025 | No description provided |
| iberol | · Jun 10, 2025 | No description provided |
| eira-group | · Jun 10, 2025 | No description provided |
| KMMP | · Jun 10, 2025 | No description provided |
| nipponindiaim | · Jun 10, 2025 | No description provided |
| unilever | · Jun 10, 2025 | No description provided |
| Ersar | · Jun 10, 2025 | No description provided |
| NCVOO | · Jun 10, 2025 | No description provided |
| BTHK | · Jun 10, 2025 | All data |
| lactanet | · Jun 10, 2025 | No description provided |
| ssi-mi | · Jun 10, 2025 | No description provided |
| dad | · Jun 10, 2025 | No description provided |
| astronika | · Jun 10, 2025 | No description provided |
| sras | · Jun 10, 2025 | No description provided |
| icidesi | · Jun 10, 2025 | No description provided |
| taos | · Jun 10, 2025 | No description provided |
| carducci | · Jun 10, 2025 | No description provided |
| Arch-con | · Jun 10, 2025 | No description provided |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .