Ransomware Group intelligence
Booba Project
ActiveTrack Booba Project with 26 published victims and 3 known leak locations in a single intelligence view.
Overview
Booba Project is tracked by Dark Eye as a ransomware group with 26 published victims.
United States is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | 7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2ada6gstcxp54lw6q2zb7jad.onion |
| Leak location 2 | Onion service | Unknown | eazk7las3xsvsyxgww3jgzammqjevso2ydnmlopdhl3u2muyrmmilrqd.onion |
| Leak location 3 | Onion service | Unknown | d77tnb4bkmj3e366msrzllnwsi2t5e54e4yqh7zm7y5hlfwugnwzswad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (26)
Search, filter and paginate the victim timeline for Booba Project.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Betz Industries id31077 View details | United States | Manufacturing / Engineering | — | |
|
Betz Industries is a US-based company operating in the manufacturing and engineering sector, providing various products and services. The company is involved in the design, development, and production of industrial equipment and components. Betz Industries was listed as a ransomware victim associated with Booba Project. |
|||||
| Ransomware | Betz Industries id31077 View details | United States | Manufacturing / Engineering | — | |
|
Industrial Machinery Manufacturing Stolen data: 7 GB. |
|||||
| Ransomware | Oklahoma Manufacturing Alliance id31013 View details | United States | IT | — | |
|
Okalliance.com is an IT company based in the US, providing various IT services. The company operates in the IT sector, offering services to clients in the United States. Okalliance.com was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Oklahoma Manufacturing Alliance id31013 View details | United States | IT | — | |
|
Business Consulting and Services Stolen data: 10 GB. |
|||||
| Ransomware | Incredible Technologies id31008 View details | United States | IT | — | |
|
ItsGames operates in the IT sector in the United States, providing various services. The company's specific offerings are not well-documented. ItsGames is generally involved in the IT industry. It was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Incredible Technologies id31008 View details | United States | IT | — | |
|
Entertainment Providers Stolen data: 25 GB |
|||||
| Ransomware | Zynex id30827 View details | Switzerland | Healthcare / Pharma | ||
|
Zynex CH is a Swiss company operating in the healthcare and medicine sector. The company is based in Switzerland and provides various medical services and products. Zynex CH was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Zynex id30827 View details | Switzerland | Healthcare / Pharma | ||
|
IT Services and IT Consulting Stolen data: 1.4 GB |
|||||
| Ransomware | Zynex id30828 View details | Switzerland | Healthcare / Pharma | ||
|
Zynex is a Swiss company operating in the healthcare and pharmaceutical sector, providing various services and offerings. The company is based in Switzerland and serves the local market with its healthcare products. Zynex was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Zynex id30828 View details | Switzerland | Healthcare / Pharma | ||
|
IT Services and IT Consulting Stolen data: 1.4 GB |
|||||
| Ransomware | Pelli Clarke Pelli Architects id30746 View details | United States | Construction / Real Estate | — | |
|
PCP Architects is a US-based company operating in the construction and real estate sector, providing architectural services. The company is involved in various projects, contributing to the development of the US construction industry. PCP Architects was listed as a ransomware victim associated with Booba Project. |
|||||
| Ransomware | Pelli Clarke Pelli Architects id30746 View details | United States | Construction / Real Estate | — | |
|
Architecture and Planning Stolen data: 45 GB. |
|||||
| Ransomware | Jani-King id30581 View details | United States | Services | — | |
|
Janiking is a US-based company operating in the services sector, providing various offerings to its customers. As a services company, Janiking likely provides support and maintenance services to its clients. Janiking was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Jani-King id30581 View details | United States | Services | — | |
|
Facilities Services Stolen data: 12 GB. |
|||||
| Ransomware | URA Group id30318 View details | Russian Federation | Manufacturing / Engineering | — | |
|
Uragroup.com is a company based in Russia, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Uragroup.com was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | URA Group id30318 View details | Russian Federation | Manufacturing / Engineering | — | |
|
Stolen data: 5 GB |
|||||
| Ransomware | Upstaging id30287 View details | United States | Transportation / Travel / Logistics | — | |
|
Upstaging.com is a company operating in the transportation, travel, and logistics sector in the United States. The company provides various services to support the logistics and transportation needs of its clients. Upstaging.com was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Upstaging id30287 View details | United States | Transportation / Travel / Logistics | — | |
|
Entertainment Providers Stolen data: 10 GB |
|||||
| Ransomware | Frosty Acres Brands id30276 View details | United States | Agriculture / Food | — | |
|
Frostyacres.com is an online presence for a US-based company operating in the agriculture and food sector. The company likely provides products or services related to farming, food production, or distribution. As a ransomware victim, frostyacres.com was listed in association with the Booba Project threat actor. |
|||||
| Ransomware | Frosty Acres Brands id30276 View details | United States | Agriculture / Food | — | |
|
Food & Beverages Stolen data: 8 GB |
|||||
| Ransomware | Telewave, Inc. id30277 View details | United States | Telecommunications | — | |
|
Telewave is a US-based company operating in the telecommunications sector, providing various products and services. The company offers solutions for wireless network operators, public safety agencies, and other organizations. Telewave was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Telewave, Inc. id30277 View details | United States | Telecommunications | — | |
|
Telecommunications Stolen data: 37 GB Telewave.io will exhibit at Booth #1146 at APCO 2026 – Association of Public Safety Communications Officials in San Antonio, Texas! They will have what to tell about. |
|||||
| Ransomware | Fonsan id30278 View details | Spain | Other | — | |
|
Fonsan is a company based in Spain, operating in the other sector. The company likely provides various services, although specific details about its offerings are not well-documented. Fonsan was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Fonsan id30278 View details | Spain | Other | — | |
|
Construction Stolen data: 23.4 GB |
|||||
| Ransomware | Nfinite 9000 S.L. id30279 View details | Spain | IT | — | |
|
nfinite9000.com is a company operating in the IT sector, based in Spain. The company likely provides various IT services, given its sector classification. nfinite9000.com was listed as a ransomware victim associated with Booba Project |
|||||
| Ransomware | Nfinite 9000 S.L. id30279 View details | Spain | IT | — | |
|
IT Services and IT Consulting Stolen data: 3 GB |
|||||