Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

BOOBA-TEAM · Threat actor profile

THREAT ACTOR

BOOBA-TEAM_

Active

BOOBA-TEAM is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of BOOBA-TEAM, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

24 Victims tracked
1 / 4 Active mirrors
2026-07-31 First listing
2026-09-22 Most recent

Victims by year

  • 2026 24

Leak site mirrors

4 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • eazk7las3xsvsyxgww3jgzammqjevso2ydnmlopdhl3u2muyrmmilrqd.onion Please Don't! snapshot · 2026-09-23 03:21
  • 7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2ada6gstcxp54lw6q2zb7jad.onion Booba Project snapshot · 2026-09-23 02:01
  • 7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2ada6gstcxp54lw6q2zb7jad.onion Booba Project snapshot · 2026-09-23 01:00
  • d77tnb4bkmj3e366msrzllnwsi2t5e54e4yqh7zm7y5hlfwugnwzswad.onion Booba Storage snapshot · 2026-09-14 05:06

Recent victims

The 50 most recent victims claimed by BOOBA-TEAM. Total in the index: 24.

Date listed Victim Description
2026-09-22 Tulare Western High School Education Administration Programs Website: www.tjuhsd.org Stolen data:…
2026-09-22 GOTTHELF Healthcare Website: www.gotthelfmd.com Stolen data: 2 GB.
2026-09-14 Mestechkin Law Group P.C. Law Practice Website: www.lawmlg.com Stolen data: 37 GB.
2026-09-14 Atlas Ocean Voyages Travel Arrangements Website: www.atlasoceanvoyages.com Stolen data: 37…
2026-08-24 Davroc Furniture and Home Furnishings Manufacturing Website: www.davroc.co.uk…
2026-08-24 Chernyy & Associates Law Practice Website: www.chernyy-law.com Stolen data: 67 GB.
2026-08-24 Country-Wide Insurance Insurance Website: www.cwico.com Stolen data: 92 GB.
2026-08-24 Federis Abogados Law Practice Website: www.federisabogados.com Stolen data: 61 GB.
2026-07-31 Index of /
2026-07-31 STAY TUNED FOR UPCOMING LEAKS
2026-07-31 Telecommunications Telecommunications Website: www.telewave.com Stolen data: 37 GB Telewa…
2026-07-31 Fonsan Construction Website: www.fonsan.com Stolen data: 23.4 GB
2026-07-31 Nfinite 9000 S.L. IT Services and IT Consulting Website: nfinite9000.com Stolen data: 3 …
2026-07-31 Upstaging Entertainment Providers Website: www.upstaging.com Stolen data: 10 GB …
2026-07-31 URA Group Website: uragroup.com Stolen data: 5 GB
2026-07-31 Jani-King Facilities Services Website: www.janiking.com Stolen data: 12 GB.
2026-07-31 Pelli Clarke Pelli Architects Architecture and Planning Website: www.pcparch.com Stolen data: 45 GB.
2026-07-31 Zynex IT Services and IT Consulting Website: www.zynex.ch Stolen data: 1.4 G…
2026-07-31 Incredible Technologies Entertainment Providers Website: www.itsgames.com Stolen data: 25 GB
2026-07-31 Oklahoma Manufacturing Alliance Business Consulting and Services Website: www.okalliance.com Stolen da…
2026-07-31 Betz Industries Industrial Machinery Manufacturing Website: www.betzindustries.com Sto…
2026-07-31 About Us Dear Valued Partners, We represent the Booba team, specializing in dat…
2026-07-31 Frosty Acres Brands Food & Beverages Website: www.frostyacres.com Stolen data: 8 GB Piece …
2026-07-31 Telewave, Inc. Telecommunications Website: www.telewave.com Stolen data: 37 GB Telewa…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.