// THREAT ACTOR
BABUK-LOCKER_
DormantBABUK-LOCKER is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of BABUK-LOCKER — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2022 6
Leak site mirrors
1 mirror tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onionBabuk - Leaks site snapshot · 2024-02-26 09:13
Recent victims
The 50 most recent victims claimed by BABUK-LOCKER. Total in the index: 6.
| Date listed | Victim | Description |
|---|---|---|
| 2022-01-25 | The Babuk team shares the position stated by the most famous hacktivist group. | |
| 2022-01-25 | 4murs.com | |
| 2022-01-25 | Arabian Computer Supplies co. | |
| 2022-01-25 | spsr-law.com | |
| 2022-01-25 | E.A. Gibson Shipbrokers | |
| 2022-01-25 | BridgeMill Athletic Club |