Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

CIPHBIT · Threat actor profile

// THREAT ACTOR

CIPHBIT_

Active

CIPHBIT is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of CIPHBIT — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

36 Victims tracked
1 / 3 Active mirrors
2023-09-17 First listing
2026-02-10 Most recent

Victims by year

  • 2026 2
  • 2025 11
  • 2024 14
  • 2023 9

Leak site mirrors

3 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • ciphbitqyg26jor7eeo6xieyq7reouctefrompp6ogvhqjba7uo4xdid.onion CiphBit Data Leak snapshot · 2026-03-02 09:29
  • sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion Sonar - Encrypted communications snapshot · 2026-08-06 21:22
  • ciphbitekvxj27jmtw5sncirfrhxrh4cw4a5qw7ef6o4vqfy4habxbyd.onion snapshot · 2025-08-09 15:25

Recent victims

The 50 most recent victims claimed by CIPHBIT. Total in the index: 36.

Date listed Victim Description
2026-02-10 Become Affiliate Contact Us at Tox: 5B85F0F52F989C42FE18A08351D4B9F50D7A9832DBE4A068346…
2026-02-10 Affiliate Contact Us at Tox: 5B85F0F52F989C42FE18A08351D4B9F50D7A9832DBE4A068346…
2025-12-02 Clínica Villa Zaita Clínica Villa Zaita is a private medical clinic in Panama City located…
2025-11-26 Church of the Ascension Anglican Church of the Ascension is an Anglican parish in London, Ontario locat…
2025-10-28 Shelly Engineering Metal Work Shelley's was founded by Peter Shelley in the 1960's. Steady growth le…
2025-10-28 António Belém & António Gonçalve António Belém & António Gonçalves (AB&AG) is a Portuguese firm that sp…
2025-10-28 Kitevuc - Equipamentos E Veiculo Kitevuc was founded in 2002, Kitevuc is a company specialized in the t…
2025-10-28 Bader Gruppe Bader Gruppe is a German-based company specializing in providing innov…
2025-10-28 Corneilhan Corneilhan is a charming commune in the Occitanie region of southern F…
2025-10-28 Jimfor, S.A. Jimfor, S.A. is a company based in Panama City, Panama, primarily oper…
2025-05-27 iptelecom GmbH We demonstrate the estimated HANDSCHLAGQUALITY with our customers and …
2025-02-12 Therma Seal Insulation Systems Therma Seal Insulation Systems is a company based in West Palm Beach, …
2025-01-01 Kitevuc - Equipamentos E Veiculos Utilitários E Comerciais
2024-12-26 Pergher Notariat
2024-12-13 António Belém & António Gonçalves
2024-11-13 AXEON 360
2024-10-04 CopySmart LLC
2024-09-28 Southern Fire Sprinkler
2024-08-21 Luigi Convertini
2024-08-16 Keios Development Consulting
2024-08-15 FD S.R.L
2024-04-17 TrueNet Communications Corp
2024-04-09 Macuz Founded in Florence in 1952 by Marcello and Alma Macuz, the company re…
2024-04-06 TermoPlastic S.R.L Termoplastic is a company that designs and manufactures plastic and ca…
2024-04-05 Commerce Dental Group At Commerce Dental Group, we have extensive experience in all aspects …
2024-02-25 Pot O’ Gold Coffee Pot O’ Gold was founded by Larry Jones in 1986 with the dream of provi…
2024-01-02 MPM Medical Supply MPM Medical Supply is a state of the art medical distributor. Recogniz…
2023-11-08 NeoDomos NeoDomos, a broker specializing in real estate insurance for over a de…
2023-11-03 APERS A.P.E.R.S is a 1901 law association agreed with the Ministry of Justic…
2023-09-17 Harmonic Accounting Harmonic Accounting, Tax & Financial Services brings many years of pub…
2023-09-17 Imperador S.R.L we are the company operating in the area of transportation and logisti…
2023-09-17 Shelly Engineering Metal Work Shelley's was founded by Peter Shelley in the 1960's. Steady growth le…
2023-09-17 RSV Centrale Bvba You can count on RSV Centrale in Herselt for installation, maintenance…
2023-09-17 Soprovise Since 1987, the EURISOLE Group which includes the companies: SOPROVISE…
2023-09-17 TransTerra Transterra Polska Sp. z o.o. is a dynamic international transport comp…
2023-09-17 Marston Domsel Decades of experience have made MARSTON-DOMSEL a household name in the…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.