THREAT ACTOR
ARVINCLUB_
DormantARVINCLUB is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of ARVINCLUB, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2023 19
- 2022 5
- 2021 15
Leak site mirrors
2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
3kp6j22pz3zkv76yutctosa6djpj4yib2icvdqxucdaxxedumhqicpad.onionArvin Club – آزادی برای اتصال snapshot · 2022-08-01 23:02 -
arvinc7prj6ln5wpd6yydfqulsyepoc7aowngpznbn3lrap2aib6teid.onionArvin | Blog snapshot · 2023-11-06 04:08
Recent victims
The 50 most recent victims claimed by ARVINCLUB. Total in the index: 39.
| Date listed | Victim | Description |
|---|---|---|
| 2023-10-15 | Islamic Azad University Electronic Campus | https://ec.iau.ir |
| 2023-10-14 | Jahesh Innovation | https://jahesh.co |
| 2023-10-14 | Kimia Tadbir Kiyan | https://ktkco.ir |
| 2023-10-08 | Islamic Azad University of Shiraz | https://shiraz.iau.ir |
| 2023-10-02 | Pasouk biological company | https://pasouk.ir |
| 2023-10-01 | Shirin Travel Agency | http://anonissfireenterfdks2u53jqevumbu6hjm35ioorsa7eq5bsjlucad.onion/… |
| 2023-09-02 | Aban Tether & OK exchange | https://abantether.com https://ok-ex.io |
| 2023-08-23 | sti company | https://sticompany.co |
| 2023-08-19 | Bitimen | https://bitimen.com |
| 2023-08-19 | AFTA Isfahan | https://ito.gov.ir/fa/afta |
| 2023-08-19 | hamyari Shahrdari golestan | http://hamyarigolestan.ir |
| 2023-08-19 | Haraz dairy | http://doosheh.com |
| 2023-08-19 | 150k sib360 Database | https://sib360.com |
| 2023-08-19 | Padena Factory | https://padenacc.ir |
| 2023-08-19 | seaside-kish co | https://www.sendspace.com/file/0oiz9f |
| 2023-08-19 | Draje food industrial group | https://draje.ir |
| 2023-08-19 | Parsian Bitumen | https://www.parsianbitumen.com |
| 2023-08-19 | Sabalan Azmayesh | https://www.sabalanmedical.ir |
| 2023-07-13 | Bitimen exchange | Bitimen |
| 2022-04-21 | Al Bijjar | |
| 2022-04-20 | AM International | |
| 2022-03-20 | stormous | |
| 2022-03-12 | bedfordshire.police.uk | |
| 2022-01-31 | elitemate.com | |
| 2021-11-28 | afcx.co | |
| 2021-10-24 | vidisha.kvs.ac.in | |
| 2021-10-22 | Revil | |
| 2021-09-20 | Bureau van Dijk(bvdinfo.com) | |
| 2021-09-10 | Compilation of Many Breaches (COMB) | |
| 2021-09-09 | USA 280M | |
| 2021-09-09 | CardPayPortal | |
| 2021-09-09 | 33M Bank Mellat – Iran | |
| 2021-09-09 | Etoudplus.ir | |
| 2021-09-09 | Beh Pardakht Mellat Cards | |
| 2021-09-09 | RockYou2021 | |
| 2021-09-09 | UtAir | |
| 2021-09-09 | Leiden University Hacked | |
| 2021-09-09 | For Press | |
| 2021-09-09 | T-Mobile |