// THREAT ACTOR
CLOP_
ActiveCl0p is a long-running ransomware operation associated with the FIN11 / TA505 threat cluster. It is best known for its mass exploitation of file-transfer software vulnerabilities — including Accellion FTA, GoAnywhere MFT, and MOVEit Transfer in 2023 — to compromise hundreds of organisations in single campaigns.
For Ransomnews editorial coverage of CLOP — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
2,268
Victims tracked
2 / 11
Active mirrors
2021-09-09
First listing
2026-08-05
Most recent
Victims by year
- 2026 176
- 2025 549
- 2024 28
- 2023 399
- 2022 577
- 2021 539
Leak site mirrors
11 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
ekbgzchl6x2ias37.onionHOME | CL0P^_- LEAKS snapshot · 2022-08-19 02:13 -
santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onionDDOS Protection snapshot · 2026-08-06 21:19 -
3ws3t4uo7fehnn4qpmadk3zjrxta5xlt3gsc5mx4sztrsy7ficuz5ayd.onionsnapshot · 2024-12-15 13:29 -
amnwxasjtjc6e42siac6t45mhbkgtycrx5krv7sf5festvqxmnchuayd.onionsnapshot · 2024-12-15 13:00 -
qahjimrublt35jlv4teesicrw6zhpwhkb6nhtonwxuqafmjhr7hax2id.onion403 Forbidden snapshot · 2024-12-15 13:15 -
npkoxkuygikbkpuf5yxte66um727wmdo2jtpg2djhb2e224i4r25v7ad.onion404 Not Found snapshot · 2025-01-22 11:15 -
6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onionsnapshot · 2025-01-22 12:03 -
l4rdimrqyonulqjttebry4t6wuzgjv5m62rnpjho3q22a6maf6d5evyd.onion403 Forbidden snapshot · 2025-11-09 04:03 -
frgp3f3u2ddafv4ny7tqn6tc674m6fyymyywoaxot7xskbjmiyhhsyqd.onionsnapshot · 2026-02-20 12:24 -
htmxyptur5wfjrd7uvg23snupub2pbtlfelk45n37b3augl2w4eearid.onionsnapshot · 2026-08-06 21:24 -
.403 Forbidden snapshot · 2025-10-09 10:02
Recent victims
The 50 most recent victims claimed by CLOP. Total in the index: 2,268.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-05 | nuv******* | Data exfiltrated included the following: Project, Soft Total size: 89… |
| 2026-08-05 | ipm******* | Data exfiltrated included the following: PDF files, Cad-files, Soft T… |
| 2026-08-05 | ecc******* | Data exfiltrated included the following: DBF files, Cad-files, Project… |
| 2026-08-05 | st******* | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-05 | qc******* | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-05 | flu******* | Data exfiltrated included the following: Database, Project,Cad-files … |
| 2026-08-05 | mid******* | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-05 | itk******* | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-05 | G3A******* | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-05 | arc******* | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-05 | omn******* | Data exfiltrated included the following: Database, Projects, SQL Backu… |
| 2026-08-05 | lif******* | Data exfiltrated included the following: Database, Projects, Backups, … |
| 2026-08-05 | sp******* | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-05 | iva******* | Data exfiltrated included the following: Database, Projects, Backups … |
| 2026-08-05 | nuo******* | Data exfiltrated included the following: Database, Projects, Soft inst… |
| 2026-08-05 | the******* | Data exfiltrated included the following: Database, Projects, Soft inst… |
| 2026-08-05 | wat******* | Data exfiltrated included the following: Database, Projects, Project B… |
| 2026-08-05 | 9al******* | Data exfiltrated included the following: Database, Projects, Project B… |
| 2026-08-05 | int******** | Data exfiltrated included the following: Database, Projects, Backups, … |
| 2026-08-05 | int******* | Data exfiltrated included the following: Database, Project, PDF, XLSX,… |
| 2026-08-05 | hon******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | ato******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | clo******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | jpm******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | bri******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | suu******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | sma******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | tri******* | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | mam******** | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-05 | cor******* | Data exfiltrated included the following: Database, Project, PDF, TXT, … |
| 2026-08-05 | mam******* | Data exfiltrated included the following: .png files, files Windchil T… |
| 2026-08-05 | par******* | Data exfiltrated included the following: Database, Project, Cad-files,… |
| 2026-08-05 | sta******* | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-05 | lar******* | Data exfiltrated included the following: Project, Soft Total size: 56… |
| 2026-08-05 | toa******* | Data exfiltrated included the following: project, backup database, log… |
| 2026-08-05 | ir****** | Data exfiltrated included the following: Cad-files, PDF drawings, diag… |
| 2026-08-05 | ald******* | Data exfiltrated included the following: TSV files, soft, Projects, Ca… |
| 2026-08-05 | phi******* | Data exfiltrated included the following: PDF drawings, diagrams, bluep… |
| 2026-08-05 | fis******* | Data exfiltrated included the following: Projects, Cad-files, files Wi… |
| 2026-08-05 | g******* | Data exfiltrated included the following: Software backups, system file… |
| 2026-08-05 | sh******* | Data exfiltrated included the following: Engineering drawings, photos … |
| 2026-08-05 | net******* | Data exfiltrated included the following: Projects, Cad-files, Backup f… |
| 2026-07-31 | BLUEVISTALLC.COM | |
| 2026-04-28 | INJURYLAWYERS.COM | |
| 2026-04-06 | ARCHIVE14 | |
| 2026-04-06 | ARCHIVE13 | |
| 2026-04-06 | ARCHIVE12 | |
| 2026-03-11 | AIGHEALTHCARE.IN | |
| 2026-03-11 | CLOUD.CLEARWAYGROUP.COM | |
| 2026-02-10 | DAD.CO.TH |