// THREAT ACTOR
CYBERLEEK_
ActiveCYBERLEEK is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of CYBERLEEK — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2026 12
Leak site mirrors
5 mirrors tracked, 4 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
leekrdlpsy3xcxwcvfje7ovj34fo4y2xqaghdikhf3t7hatev346h6qd.onionLeek Road // Community Hub snapshot · 2026-08-25 18:11 -
leek.vilenarios.comsnapshot · 2026-09-05 10:14 -
ju3hayvlyj4mbemqheplf3px5d6j673oszj6atv6ukta7phiy22a.arweave.netsnapshot · 2026-09-05 10:16 -
cyberleek.vilenarios.comsnapshot · 2026-09-05 10:12 -
cyberleek.ar.iosnapshot · 2026-09-05 10:06
Recent victims
The 50 most recent victims claimed by CYBERLEEK. Total in the index: 12.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-24 | GTA 6: Nudist Town (Strong Nudity) | |
| 2026-08-24 | GTA 6: Map Sneak Peek 1 | |
| 2026-08-24 | GTA 6: Map Sneak Peek 2 | |
| 2026-08-24 | GTA 6: Basketball Video | |
| 2026-08-24 | GTA 6: Full Map | |
| 2026-08-24 | GTA 6: Taser Video | |
| 2026-08-24 | GTA 6: Hypercar Video | |
| 2026-08-24 | GTA 6: Plane Video | |
| 2026-08-24 | GTA 6: Junkie Video | |
| 2026-08-24 | Strip Club | |
| 2026-08-24 | GTA 6: Gas | |
| 2026-08-24 | GTA 6: Plane (Night) |