Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

AVADDON · Threat actor profile

// THREAT ACTOR

AVADDON_

Dormant

AVADDON is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of AVADDON — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

142 Victims tracked
0 / 2 Active mirrors
2021-09-09 First listing
2021-09-09 Most recent

Victims by year

  • 2021 142

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • avaddongun7rngel.onion snapshot · 2021-09-08 00:04
  • avaddonbotrxmuyl.onion snapshot · 2024-12-09 17:47

Recent victims

The 50 most recent victims claimed by AVADDON. Total in the index: 142.

Date listed Victim Description
2021-09-09 EFCO forms
2021-09-09 Sky Leasing, LLC
2021-09-09 Golden Aluminum
2021-09-09 J.C. Cannistraro
2021-09-09 Lonrho
2021-09-09 American Bank Systems INC
2021-09-09 Brown Robert LLP
2021-09-09 National AIDS Control Council
2021-09-09 Monterey Bay Air Resources District
2021-09-09 Dade City Florida
2021-09-09 KOE
2021-09-09 AHT Global
2021-09-09 Garvin Promotion Group, LLC
2021-09-09 NetVigour Inc
2021-09-09 Intensive Care On-Line Network , Inc
2021-09-09 Payzant Building Products Ltd
2021-09-09 International Longshore & Warehouse Union
2021-09-09 Marolles-en-Brie
2021-09-09 Finalyse
2021-09-09 BIOREP TECHNOLOGIES, INC.
2021-09-09 MK-Technik
2021-09-09 Allanasons Ltd
2021-09-09 American Heart of Poland Inc
2021-09-09 PT Asuransi Bintang Tbk
2021-09-09 VAUGHN CONCRETE PRODUCTS, INC
2021-09-09 Groupe Qualinet Inc.
2021-09-09 Somerset ISD
2021-09-09 FBL Advogados
2021-09-09 Hardy Buoys Smoked Fish Inc.
2021-09-09 KEITH MACHINERY CORP.
2021-09-09 BEE LINE LOGISTICS, INC
2021-09-09 Elite Software Inc
2021-09-09 MundoFertil
2021-09-09 SVI ASSURANCES
2021-09-09 UNIVERSAL ACCOUNTING SERVICES INC
2021-09-09 The Capital Medical Center
2021-09-09 Mullins Food Products Inc
2021-09-09 JFC International (Europe)
2021-09-09 Carnegie Wave Energy
2021-09-09 Grand Power Systems
2021-09-09 VERIHA TRUCKING INC
2021-09-09 Party Rental LTD
2021-09-09 Prefeitura Municipal de Saquarema
2021-09-09 CELL Foods Inc.
2021-09-09 CASHMAG
2021-09-09 Doré Law Group P.C
2021-09-09 Omni Manufacturing, Inc.
2021-09-09 FUTURIMPLANTS
2021-09-09 ANLEC R&D
2021-09-09 La compagnie du SAV

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.