Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

APOS · Threat actor profile

// THREAT ACTOR

APOS_

Dormant

APOS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of APOS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

16 Victims tracked
0 / 3 Active mirrors
2024-04-29 First listing
2025-08-15 Most recent

Victims by year

  • 2025 12
  • 2024 4

Leak site mirrors

3 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • apos.blog Notion – The all-in-one workspace for your notes, tasks, wikis, and databases. snapshot · 2024-05-25 13:08
  • yrz6bayqwhleymbeviter7ejccxm64sv2ppgqgderzgdhutozcbbhpqd.onion SBU snapshot · 2025-10-02 04:14
  • yrz6bayqwhleymbeviter7ejccxm64sv2ppgqgderzgdhutozcbbhpqd.onion SBU snapshot · 2025-10-02 04:16

Recent victims

The 50 most recent victims claimed by APOS. Total in the index: 16.

Date listed Victim Description
2025-08-15 ACMARK ACMARK s.r.o. was established in 2009 and its mission is to provide hi…
2025-06-12 Lawton Partners Over the years, Lawton Partners has continued to grow and adapt to mee…
2025-06-10 RH
2025-06-10 wow pictures wow pictures.com.au 500000 Australia we exfiltrate all the data fro…
2025-06-10 Ha******.us Ha******.us 5000000 United States we exfiltrate all the data Ha****…
2025-06-10 infraestructures.cat infraestructures.cat 15000000 Spain We have compromised your main s…
2025-03-17 KIU System Solutions We offer technology for airlines through a suite of integrated solutio…
2025-03-04 Netcom-World
2025-03-04 InternetWay
2025-02-20 M-1 TOOLWORKS M-1 Tool Works, Inc. (M-1) offers aerospace quality precision machinin…
2025-01-05 Drogarias Preço Bom Drogarias Preço Bom is a pharmacy chain in Brazil, founded by Wagner P…
2025-01-04 Auxis Download -> https://shorturl.at/h1Wj3 | Auxis specializes in business …
2024-04-29 Drogaria Preco Bom 5.6GB5MBrazilPrivate dataPublishedbomprecodrogaria.com.br
2024-04-29 Sunlux Group 160GB5.1MFrancePrivate dataFinancial dataNot publishedsunlux-group.com
2024-04-29 Algen Healthcare 90GB5MIndiaFinancial dataPrivate dataNot publishedalgenhealthcare.co
2024-04-29 Bitz Softwares 18.1MB11.3MBrazilSource codeNot publishedbitzsoftwares.com.br

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.