Ransomware Group intelligence
Krybit
ActiveTrack Krybit with 234 published victims and 6 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Krybit is tracked by Dark Eye as a ransomware group with 234 published victims.
Mexico is currently the most targeted country in this dataset.
6 known leak locations are currently associated with this group.
Leak Status Distribution
112
- Leaked 60 53.6%
- Pending 52 46.4%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (6)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 4 | Onion service | Up checked 7h ago | krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion |
| Leak location 6 | Onion service | Up checked 7h ago | krybivdln3oc3twbin4budgznzq7dmcolldnsx455lspxxe23b56y5qd.onion |
| Leak location 5 | Onion service | Up checked 7h ago | krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion |
| Leak location 1 | Onion service | Up checked 7h ago | krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion |
| Leak location 3 | Onion service | Down checked 7h ago | krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion |
| Leak location 2 | Web location | Down checked 7h ago | krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd. |
Top Activity Sectors (16)
- IT 23
- Manufacturing / Engineering 17
- Not identified 16
- Finance / Legal / Insurance 14
- Transportation / Travel / Logistics 11
- Services 9
- Retail / E-commerce 9
- Construction / Real Estate 8
- Healthcare / Pharma 7
- Public Sector 7
- Education 7
- Hospitality / Food & Beverage / Tourism 4
- Agriculture / Food 3
- Energy 3
- NGOs / Associations 2
- Telecommunications 2
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Krybit, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: krybit leverages PowerShell scripts to stage initial execution and automate lateral movement across endpoints.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: krybit uses native API calls to execute malicious payloads and bypass host-based execution controls.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
What they do: krybit modifies registry run keys to ensure malware persistence across reboots on compromised systems.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: krybit disables antivirus tools and security software to prevent detection and hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: krybit deletes Volume Shadow Copies and backup directories to eliminate recovery options for victims.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1057 Process Discovery Discovery
What they do: krybit performs process discovery to identify critical services and isolate high-value targets for disruption.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: krybit exploits SMB/Windows Admin Shares to move laterally within manufacturing and engineering networks.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1041 Exfiltration Over C2 Channel Exfiltration
What they do: krybit exfiltrates stolen data over C2 channels before deployment to enable double extortion tactics.
What that means: Adversaries may steal data by exfiltrating it over an existing command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: krybit encrypts victim files using custom ransomware routines, locking business data for extortion demands.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: krybit invokes system recovery inhibition commands to prevent automated restoration of encrypted files.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Ransom Notes (1)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-RECOVER.txt
--KRYBIT Your network/system was encrypted. Encrypted files have new extension. --Blog http://krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion/ http://krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion/ http://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion/ http://krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion/ -- Compromising and sensitive data We have downloaded compromising and sensitive data from you system/network If you refuse to communicate with us and we do not come to an agreement, your data will be published. Data includes: - Employees personal data, CVs, DL , SSN. - Complete network map including credentials for local and remote services. - Financial information including clients data, bills, budgets, annual reports, bank statements. - Complete datagrams/schemas/drawings for manufacturing in solidworks format - And more... -- Warning If you modify files - our decrypt software won't able to recover data If you use third party software - you can damage/modify files (see item 1) You need cipher key / our decrypt software to restore you files. The police or authorities will not be able to help you get the cipher key. We encourage you to consider your decisions. -- Recovery 1) Download tor browser: https://www.torproject.org/download/ 2) Visit the chat: http://krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion/chat/[snip]/ 3) Use this ID to log in: [snip] 4) Supp: 071EA649F06BDB7123C99653B7371E3B59860EE405E66A31EE0FD385F745A000405B6846ECBC
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (234)
Search, filter and paginate the victim timeline for Krybit. Showing 101–200 of 234.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | reflet2000.fr id31393 View details | France | Retail / E-commerce | leaked | ||
|
REFLET 2000 is a French company founded in 1984, specializing in general building cleaning services (Nettoyage courant d... |
||||||
| Ransomware | www.actini.com id31394 View details | France | IT | leaked | ||
|
Actini is an IT company based in France, providing various services to its clients. The company operates in the IT sector, offering solutions to businesses. Actini was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | www.actini.com id31394 View details | France | IT | leaked | ||
|
Actini Group (ACTINI SAS) is a French industrial machinery manufacturing company with over 70 years of experience, found... |
||||||
| Ransomware | www.ernat-bureau-etudes.fr id31395 View details | France | Manufacturing / Engineering | leaked | ||
|
Ernat Bureau Etudes is a French company operating in the manufacturing and engineering sector. The company provides various services and solutions to its clients. Ernat Bureau Etudes is listed as a ransomware victim associated with krybit |
||||||
| Ransomware | www.ernat-bureau-etudes.fr id31395 View details | France | Manufacturing / Engineering | leaked | ||
|
ERNAT (Etudes Réalisations Négoce Assistance Technique) SARL SCOP is a French worker cooperative (SCOP — Société C... |
||||||
| Ransomware | www.serengetiestates.co.za id31396 View details | South Africa | Construction / Real Estate | leaked | ||
|
Serengeti Estates is a South African company operating in the construction and real estate sector, providing various services to clients in the region. The company is involved in property development and management, catering to the needs of its customers in South Africa. Serengeti Estates was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | www.serengetiestates.co.za id31396 View details | South Africa | Construction / Real Estate | leaked | ||
|
Serengeti Estates (Serengeti Golf and Wildlife Estate) is a premier South African luxury residential golf and wildlife e... |
||||||
| Ransomware | www.hymiasa.com id31397 View details | Peru | Manufacturing / Engineering | leaked | ||
|
Hymiasa operates in the manufacturing and engineering sector in Peru, providing various products and services to its customers. As a company in this sector, it is involved in the design, development, and production of goods and equipment. Hymiasa was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | www.hymiasa.com id31397 View details | Peru | Manufacturing / Engineering | leaked | ||
|
HYMIASA (Hules y Mangueras Industriales y Automotrices, S.A. de C.V.) is a Mexican leading company specialized in fluid ... |
||||||
| Ransomware | cesmac.edu.br id31239 View details | Brazil | Education | leaked | ||
|
Cesmac.edu.br is a Brazilian educational institution located in the country of Brazil, operating in the education sector, and offering various academic programs. The entity is involved in providing educational services to students. Cesmac.edu.br was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | cesmac.edu.br id31239 View details | Brazil | Education | leaked | ||
|
Centro Universitário CESMAC (CESMAC University Center) is the largest private higher education institution in the state... |
||||||
| Ransomware | www.prohealth.sg id31166 View details | Singapore | Healthcare / Pharma | leaked | ||
|
Prohealth.sg is a healthcare service provider based in Singapore, offering medical services to patients in the country. As a healthcare provider, prohealth.sg is part of the medicine sector in Singapore. Prohealth.sg was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | www.prohealth.sg id31166 View details | Singapore | Healthcare / Pharma | leaked | ||
|
ProHealth Medical Group Pte Ltd is a Singaporean private primary healthcare group founded in the 1990s, headquartered at... |
||||||
| Ransomware | www.dcpartner.co.za id31158 View details | South Africa | Finance / Legal / Insurance | leaked | ||
|
DC Partner is a financial and legal services company based in South Africa, operating in the finance, legal, and insurance sector. The company provides various services to its clients in these sectors. DC Partner was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | www.dcpartner.co.za id31158 View details | South Africa | Finance / Legal / Insurance | leaked | ||
|
DC Partner (Pty) Ltd is a South African market-leading Payment Distribution Agency (PDA), one of only four NCR-accredite... |
||||||
| Ransomware | nigeria.asa-international.com id31159 View details | Nigeria | Finance / Legal / Insurance | leaked | ||
|
Nigeria.asa-international.com operates in the finance, legal, and insurance sector in Nigeria, providing various financial services. The company's offerings cater to the Nigerian market, focusing on financial solutions. Nigeria.asa-international.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | nigeria.asa-international.com id31159 View details | Nigeria | Finance / Legal / Insurance | leaked | ||
|
ASHA Microfinance Bank Limited (ASA Nigeria) is a Nigerian for-profit deposit-taking microfinance institution, a fully l... |
||||||
| Ransomware | www.ville-rinxent.fr id31154 View details | France | Public Sector | leaked | ||
|
Ville Rinxent is a commune in the Pas-de-Calais department in the Hauts-de-France region of France, offering various public services to its residents. As a public sector entity, it provides essential services such as administrative support, infrastructure management, and community development. Ville Rinxent was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | www.ville-rinxent.fr id31154 View details | France | Public Sector | leaked | ||
|
Mairie de Rinxent (Municipality of Rinxent) is the official website of the town hall (mairie) of Rinxent, a small French... |
||||||
| Ransomware | countrymotors.com.mx id31155 View details | Mexico | Retail / E-commerce | leaked | ||
|
Countrymotors.com.mx is an e-commerce platform based in Mexico, operating in the retail sector, offering various products and services to its customers. As an online retailer, countrymotors.com.mx provides a range of products, catering to the Mexican market. Countrymotors.com.mx was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | countrymotors.com.mx id31155 View details | Mexico | Retail / E-commerce | leaked | ||
|
Country Motos S.A. de C.V. (also known as Country Motors or Country Honda) is a Mexican motorcycle dealership and multi-... |
||||||
| Ransomware | www.buzztrading104.co.za id31157 View details | South Africa | Finance / Legal / Insurance | leaked | ||
|
Buzztrading104.co.za is a financial services entity based in South Africa, operating within the finance, legal, and insurance sector. The company likely provides various financial services to its clients in the region. It was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | www.buzztrading104.co.za id31157 View details | South Africa | Finance / Legal / Insurance | leaked | ||
|
Buzz Trading 104 (Pty) Ltd (also trading as Master Products) is a South African privately owned manufacturer and wholesa... |
||||||
| Ransomware | nilepet.com id30779 View details | Egypt | Energy | pending | ||
|
Nilepet.com is an Egyptian energy company operating in the energy sector, providing various services and offerings to the industry. Located in Egypt, the company plays a significant role in the country's energy landscape. Nilepet.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | nilepet.com id30779 View details | Egypt | Energy | pending | ||
|
Nile Petroleum Corporation (NILEPET) is the state-owned national oil and gas company of the Republic of South Sudan, est... |
||||||
| Ransomware | laxai.com id30775 View details | Lao People's Democratic Republic | Healthcare / Pharma | leaked | ||
|
Laxai.com is a healthcare and pharmaceutical company based in LA, providing various services and offerings in the medical sector. The company operates in the healthcare and pharma industry, catering to the needs of its clients. Laxai.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | laxai.com id30775 View details | Lao People's Democratic Republic | Healthcare / Pharma | leaked | ||
|
LAXAI Life Sciences Pvt. Ltd. is an Indian Contract Research, Development, and Manufacturing Organization (CRDMO) founde... |
||||||
| Ransomware | chkck.com id30776 View details | Other | pending | |||
|
chkck.com operates in the other sector, providing unspecified services. The entity's location and specific offerings are not publicly known. chkck.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | chkck.com id30776 View details | Other | pending | |||
|
CH. Karnchang Public Company Limited (บริษัท ช.การช่าง จำกัด (มหาชน)) is... |
||||||
| Ransomware | dhli.in id30747 View details | India | Transportation / Travel / Logistics | pending | ||
|
dhli.in is a company based in India, operating in the transportation, travel, and logistics sector. The company provides various services to facilitate the movement of goods and people. dhli.in was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | dhli.in id30747 View details | India | Transportation / Travel / Logistics | pending | ||
|
Delhi Heart & Lung Institute (DHLI) is a tertiary care 100-bedded super specialty hospital established in 2003 in New De... |
||||||
| Ransomware | Vibonum Technologies Private Limited id30748 View details | India | IT | pending | ||
|
Vibonum Technologies Private Limited is an IT company based in India, providing various technology services. The company operates within the IT sector, offering solutions to its clients. Vibonum Technologies Private Limited was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | Vibonum Technologies Private Limited id30748 View details | India | IT | pending | ||
|
*** is a recently incorporated Indian private limited company established on March 27, ... |
||||||
| Ransomware | eurohold.bg id30692 View details | Bulgaria | Finance / Legal / Insurance | pending | ||
|
Eurohold.bg is a Bulgarian financial and insurance services provider, operating in the finance, legal, and insurance sectors. The company offers a range of financial products and services to its customers in Bulgaria. Eurohold.bg was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | eurohold.bg id30692 View details | Bulgaria | Finance / Legal / Insurance | pending | ||
|
Eurohold Bulgaria AD (Еврохолд България АД) is a leading Bulgarian integrated holding company founded ... |
||||||
| Ransomware | euroins.bg id30669 View details | Bulgaria | Finance / Legal / Insurance | pending | ||
|
Euroins.bg is a Bulgarian insurance company operating in the finance and legal sectors, providing various insurance products and services to its customers in Bulgaria. As part of the finance and insurance sector, euroins.bg plays a significant role in the country's economy. Euroins.bg was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | euroins.bg id30669 View details | Bulgaria | Finance / Legal / Insurance | pending | ||
|
Euroins Insurance Company AD (Застрахователна компания Евроинс АД) is one of the first a... |
||||||
| Ransomware | eitzchaim.com id30630 View details | Israel | NGOs / Associations | pending | ||
|
Eitzchaim.com is an Israeli non-governmental organization operating in the sector of NGOs and associations, likely providing various services and support to its members and community. As an NGO, eitzchaim.com may be involved in charitable activities, advocacy, and community development. Eitzchaim.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | eitzchaim.com id30630 View details | Israel | NGOs / Associations | pending | ||
|
Eitz Chaim Schools (Hebrew: ישיבת עץ חיים — Yeshivas Eitz Chaim) is a private Orthodox Jewish elementary sc... |
||||||
| Ransomware | formasuniversales.com id30631 View details | Mexico | Education | pending | ||
|
Formasuniversales.com is an entity operating in the education sector in Mexico, offering various educational services. The entity's name suggests a focus on universal education forms. Formasuniversales.com was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | formasuniversales.com id30631 View details | Mexico | Education | pending | ||
|
Formas Universales, S.A. is a Panamanian company founded in 1985, specializing in the production and commercialization o... |
||||||
| Ransomware | rehabmalaysia.com id30632 View details | Malaysia | Healthcare / Pharma | pending | ||
|
Rehabmalaysia.com is a Malaysian entity operating in the healthcare and medicine sector, providing rehabilitation services. Located in Malaysia, the organization offers various healthcare services to its patients. Rehabmalaysia.com was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | rehabmalaysia.com id30632 View details | Malaysia | Healthcare / Pharma | pending | ||
|
Pusat Rehabilitasi PERKESO Tun Abdul Razak (PERKESO Rehabilitation Centre Malaysia) is a Malaysian government-linked reh... |
||||||
| Ransomware | www.lagus.cz id30633 View details | Czechia | Manufacturing / Engineering | pending | ||
|
Lagus.cz is a Czech company operating in the manufacturing and engineering sector, providing various services and products to its customers. The company is based in the Czech Republic and offers solutions tailored to the needs of its clients. Lagus.cz was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | www.lagus.cz id30633 View details | Czechia | Manufacturing / Engineering | pending | ||
|
LAGUS s.r.o. is a genuine Czech manufacturing company established on April 21, 1998, headquartered in Hruškové Dvory (... |
||||||
| Ransomware | xuerong.com id30359 View details | China | Other | pending | ||
|
Xuerong.com is a Chinese entity operating in the other sector, providing various offerings to its customers. Located in China, the company is part of a diverse range of industries. Xuerong.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | xuerong.com id30359 View details | China | Other | pending | ||
|
Shanghai Xuerong Biotechnology Co., Ltd. (上海雪榕生物科技股份有限公司), formerly known as Shanghai Gaoron... |
||||||
| Ransomware | shelby.com.mx id30360 View details | Mexico | Retail / E-commerce | pending | ||
|
Shelby.com.mx operates in the retail and e-commerce sector in Mexico, offering various products and services to its customers. As an e-commerce platform, it provides a range of goods and services to the Mexican market. Shelby.com.mx was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | shelby.com.mx id30360 View details | Mexico | Retail / E-commerce | pending | ||
|
Shelby Manufacturing de México, S.A. de C.V. is a Mexican maquiladora company specializing in the manufacturing of sewi... |
||||||
| Ransomware | seprec.gob.bo id30319 View details | Bolivia, Plurinational State of | Public Sector | pending | ||
|
Seprec.gob.bo is a public sector entity based in Bolivia, providing various services to the government and citizens. The entity operates in the public sector, offering services related to its mandate. Seprec.gob.bo was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | seprec.gob.bo id30319 View details | Bolivia, Plurinational State of | Public Sector | pending | ||
|
SEPREC (Servicio Plurinacional de Registro de Comercio / Plurinational Commercial Registry Service) is a Bolivian decent... |
||||||
| Ransomware | majuhome.com.my id30239 View details | Malaysia | Construction / Real Estate | pending | ||
|
Majuhome.com.my is a Malaysian company operating in the construction and real estate sector, providing various services related to property development and management. The company is based in Malaysia and offers a range of services to its clients. Majuhome.com.my was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | majuhome.com.my id30239 View details | Malaysia | Construction / Real Estate | pending | ||
|
MAJUHOME Concept (Maju Home Furnishing Sdn. Bhd.) is a Malaysian leading one-stop mega furniture mall and lifestyle bran... |
||||||
| Ransomware | duflosa.com id30240 View details | Mexico | Other | pending | ||
|
Duflosa.com is a company based in Mexico, operating in the other sector. The company's specific offerings are not well-documented, but it is known to be a part of the Mexican business landscape. Duflosa.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | duflosa.com id30240 View details | Mexico | Other | pending | ||
|
DUFLO SAS (Duflo Servicios Integrales S.A.S.) is a Colombian company specializing in integrated facility management and ... |
||||||
| Ransomware | blaofood.com id30141 View details | Retail / E-commerce | pending | |||
|
Blaofood.com operates in the retail and e-commerce sector, offering various products to customers. As an online retailer, blaofood.com provides a platform for users to browse and purchase goods. Blaofood.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | blaofood.com id30141 View details | Retail / E-commerce | pending | |||
|
B'Laofood Joint Stock Company (formerly B'Laofood Company Limited until March 25, 2026) is a Vietnamese leading manufact... |
||||||
| Ransomware | jaws.com.tw id30142 View details | Taiwan, Province of China | Manufacturing / Engineering | pending | ||
|
Jaws.com.tw is a company based in Taiwan, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector, catering to the needs of its clients in Taiwan and potentially beyond. Jaws.com.tw was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | jaws.com.tw id30142 View details | Taiwan, Province of China | Manufacturing / Engineering | pending | ||
|
JAWS Co., Ltd. (兆旭公司) is a Taiwanese manufacturer of electronic connectors and cable assemblies, founded in May ... |
||||||
| Ransomware | gsp.es id30143 View details | Spain | Other | pending | ||
|
Gsp.es is a Spanish entity operating in the other sector, providing various offerings to its customers in Spain. The entity is known to be based in the country, serving its local market. Gsp.es was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | gsp.es id30143 View details | Spain | Other | pending | ||
|
Global Software Partner S.L. (GSP) is a Spanish IT consulting and software company with over 30 years of experience in e... |
||||||
| Ransomware | www.diss.com id30144 View details | United States | Other | pending | ||
|
Diss.com is an online platform based in the United States, operating in the other sector. The company provides various online services. Diss.com was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | www.diss.com id30144 View details | United States | Other | pending | ||
|
DISS Analytics is the digital solutions and statistical reporting division of DISS Corporation (Digital Imaging & Soluti... |
||||||
| Ransomware | gitmea.com id30145 View details | Montenegro | IT | pending | ||
|
Gitmea.com is an IT company based in the Middle East, providing various IT services. As an entity in the IT sector, gitmea.com likely offers services such as software development, consulting, and technology solutions. Gitmea.com was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | gitmea.com id30145 View details | Montenegro | IT | pending | ||
|
German Imaging Technologies (GIT) Dubai LLC is a German-founded company established in 1999, headquartered in Dubai, UAE... |
||||||
| Ransomware | TRANSPORTES Y LOGISTICA BRAS, S.A id30146 View details | Spain | Transportation / Travel / Logistics | pending | ||
|
TRANSPORTES Y LOGISTICA BRAS, S.A is a company operating in the transportation and logistics sector in Spain. The company likely provides services such as freight forwarding, warehousing, and supply chain management. TRANSPORTES Y LOGISTICA BRAS, S.A was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | TRANSPORTES Y LOGISTICA BRAS, S.A id30146 View details | Spain | Transportation / Travel / Logistics | pending | ||
|
***.A. is a Guatemalan company specializing in heavy land transport and logistics services, ... |
||||||
| Ransomware | aai.com.tw id30147 View details | Taiwan, Province of China | Manufacturing / Engineering | pending | ||
|
Aai.com.tw is a company based in Taiwan, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Aai.com.tw was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | aai.com.tw id30147 View details | Taiwan, Province of China | Manufacturing / Engineering | pending | ||
|
AeroVision Avionics, Inc. (AAI) (利翔航太電子股份有限公司) is a Taiwanese high-tech company incorporated in ... |
||||||
| Ransomware | www.northern-access.com id30148 View details | Canada | Transportation / Travel / Logistics | pending | ||
|
Northern Access is a company operating in the transportation and logistics sector in Canada, providing services to facilitate the movement of goods. The company is involved in various aspects of the supply chain, including travel and logistics management. Northern Access was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | www.northern-access.com id30148 View details | Canada | Transportation / Travel / Logistics | pending | ||
|
Northern Access Transportation, Inc. is a locally owned American company founded in Duluth, Minnesota, USA, dedicated to... |
||||||
| Ransomware | moscati.org id30149 View details | Italy | NGOs / Associations | pending | ||
|
Moscati.org is an Italian organization operating in the NGOs and associations sector. The entity is involved in various activities, likely providing services and support to its members and the community. Moscati.org was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | moscati.org id30149 View details | Italy | NGOs / Associations | pending | ||
|
Hôpital Catholique Saint Joseph Moscati (***.org) is a Catholic hospital operating under the motto "Foi et charité... |
||||||
| Ransomware | ford.mx id30054 View details | Mexico | Manufacturing / Engineering | pending | ||
|
Ford Mexico operates in the manufacturing and engineering sector, offering various automotive products and services in Mexico. As a major player in the country's automotive industry, the company has a significant presence in the Mexican market. Ford Mexico was listed as a ransomware victim associated with krybit. |
||||||
| Ransomware | ford.mx id30054 View details | Mexico | Manufacturing / Engineering | pending | ||
|
Ford Motor Company, S.A. de C.V. (Ford de Mexico) is the Mexican subsidiary of Ford Motor Company (USA), the first autom... |
||||||
| Ransomware | politur.gob.do id30027 View details | Dominican Republic | Public Sector | pending | ||
|
Politur.gob.do is a government website in the Dominican Republic, operating within the public sector. The entity provides various services and information to the public. Politur.gob.do was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | politur.gob.do id30027 View details | Dominican Republic | Public Sector | pending | ||
|
POLITUR (Dirección Central de Policía de Turismo / Central Directorate of Tourism Police), now also known as CESTUR (C... |
||||||
| Ransomware | sansilvestre.edu.pe id30019 View details | Peru | Education | pending | ||
|
Sansilvestre.edu.pe is an educational institution based in Peru, providing academic programs and services to students. As part of the education sector in Peru, it plays a significant role in the country's educational system. Sansilvestre.edu.pe was listed as a ransomware victim associated with krybit |
||||||
| Ransomware | sansilvestre.edu.pe id30019 View details | Peru | Education | pending | ||
|
San Silvestre School (Asociación Civil) is one of Peru's most prestigious private all-girls British schools, founded in... |
||||||
| Ransomware | aasa.ae id30006 View details | United Arab Emirates | Transportation / Travel / Logistics | pending | ||
|
AASA CP Holding Company (AASA Group) is a multinational business headquartered in Dubai, UAE, with a proud legacy of exc... |
||||||
| Ransomware | www.mupras.com id30007 View details | Brazil | Other | pending | ||
|
MUPRAS RAM (Mutuelle de Prévoyance et d'Actions Sociales de Royal Air Maroc) is a Moroccan mutual aid and social welfar... |
||||||
| Ransomware | coemi.com.br id30008 View details | Brazil | Manufacturing / Engineering | pending | ||
|
Coemi Imóveis is a Brazilian real estate company with 41 years of tradition in Brasília, Distrito Federal, Brazil, fou... |
||||||
| Ransomware | www.courdescomptes.sn id29963 View details | Senegal | Public Sector | pending | ||
|
La Cour des Comptes du Sénégal (The Court of Auditors of Senegal) is an independent supreme audit institution of Seneg... |
||||||
| Ransomware | ersa.com.py id29964 View details | Paraguay | Energy | pending | ||
|
ERSA (Enrique Remmele S.A.C.I.) is a 100% Paraguayan industrial company founded in 1928, originally established for the ... |
||||||
| Ransomware | theorangeblowfish.com id29892 View details | Retail / E-commerce | pending | |||
|
The Orangeblowfish is an award-winning independent creative and branding agency founded in 2012 by Natalie Lowe, headqua... |
||||||
| Ransomware | frey.com id29863 View details | Switzerland | Manufacturing / Engineering | pending | ||
|
FREY (Frey Brothers, Inc.) is an American eco-friendly laundry care products company founded in 2017 by brothers Erin an... |
||||||
| Ransomware | www.mbt-energy.com id29849 View details | Germany | Energy | pending | ||
|
Xiamen Mibet New Energy Co., Ltd. (Mibet Energy) is a Chinese high-tech enterprise specializing in the research, develop... |
||||||
| Ransomware | aisem.gob.bo id29820 View details | Bolivia, Plurinational State of | Public Sector | pending | ||
|
AISEM (Agencia de Infraestructura en Salud y Equipamiento Médico) is a Bolivian government agency responsible for the d... |
||||||
| Ransomware | www.progress-security.com id29821 View details | Germany | Services | pending | ||
|
Progress Security Systems is a leading UAE-based provider of enterprise-grade security solutions, headquartered in Abu D... |
||||||
| Ransomware | libertyinsurance.com.ph id29732 View details | Philippines | Finance / Legal / Insurance | pending | ||
|
Liberty Insurance Corporation is a Philippine non-life insurance company established in 1953, headquartered in Makati Ci... |
||||||
| Ransomware | PROBE, S.A. DE C.V id29733 View details | Mexico | Manufacturing / Engineering | pending | ||
|
***.A. DE C.V. is a Salvadoran family-owned company founded in 1978, headquartered in San Salvador, El Salvador. It... |
||||||
| Ransomware | huashan.com.cn id29657 View details | China | Manufacturing / Engineering | pending | ||
|
Shantou Huashan Electronic Devices Co., Ltd. (SHEDCL) is a Chinese manufacturer of semiconductor devices and electronic ... |
||||||
| Ransomware | schultz.com.br id29652 View details | Brazil | Retail / E-commerce | pending | ||
|
Schultz Operadora de Turismo helps people explore the world with easy travel planning. They handle everything from airli... |
||||||
| Ransomware | www.elumax.com id29582 View details | Taiwan, Province of China | Manufacturing / Engineering | — | ||
|
Lumax is dedicated to maintaining high standards of ethics, corporate governance and effective accountability mechanisms... |
||||||
| Ransomware | activ88-interim.com id29565 View details | Germany | Finance / Legal / Insurance | pending | ||
|
Activ'Interim 88 was founded in 2008 with the aim of connecting job seekers with the best opportunities available in the... |
||||||
| Ransomware | www.transbras.com.gt id29566 View details | Guatemala | Transportation / Travel / Logistics | pending | ||
|
Founded in 1974, started its activities in Road Transport, eventually expanding its services to several other areas, fir... |
||||||
| Ransomware | tulipmediworld.com id29368 View details | India | Healthcare / Pharma | leaked | ||
|
A complete data breach has occurred at Tulip Mediworld Hospital, a multi-specialty hospital located on GS Road, Rukmini ... |
||||||
| Ransomware | ecci-srl.com id29387 View details | Italy | Construction / Real Estate | pending | ||
|
Empresa dedicada al rubro de construcción de proyectos inmobiliarios, particularmente la Ciudad Nueva Santa Cruz. El á... |
||||||
| Ransomware | motofrenos.com id29457 View details | Mexico | Manufacturing / Engineering | pending | ||
|
MotoFrenos is a Colombian metalworking company with a global reach that designs, manufactures, and installs equipment an... |
||||||
| Ransomware | smile-siam.com id29458 View details | Thailand | Other | pending | ||
|
Smile Siam Printing Service founded since 1995 by a group of experienced staff in printing business, we are the distinct... |
||||||