THREAT ACTOR
DARKRACE_
DormantDARKRACE is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of DARKRACE, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2023 10
Leak site mirrors
1 mirror tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
wkrlpub5k52rjigwxfm6m7ogid55kamgc5azxlq7zjgaopv33tgx2sqd.onion404 Not Found snapshot · 2023-06-21 02:10
Recent victims
The 50 most recent victims claimed by DARKRACE. Total in the index: 10.
| Date listed | Victim | Description |
|---|---|---|
| 2023-06-09 | marstrand.se | Längst ut i väster, där skärgården tar slut och havet tar vid, ligger … |
| 2023-06-07 | COOPERATIVETECH | Cooperative Technologies delivers proven, industry specific standards-… |
| 2023-06-07 | vaud-promotion | L’Association Vaud Promotion a pour but d’accroître la notoriété, la c… |
| 2023-06-06 | PICPLUS.COM | Pictures Plus and O'Roke Photography have over 50 years of combined ex… |
| 2023-06-05 | rzepeckimroczkowski | Rzepecki Mroczkowski Sp. Z o.o. - z grupą Volkswagen związani jesteśmy… |
| 2023-06-04 | hep global GmbH | A partner for everything to do with solar energy. That’s hep. Since 20… |
| 2023-06-03 | PLURISERVICE | Pluriservice Spa nasce nel 1986, è leader nel settore Auto ID (codice … |
| 2023-06-03 | PESSI | PESSI is committed to provide services and benefits to workers and the… |
| 2023-06-02 | ERT | ERT is a Portuguese multinational company with its core business on th… |
| 2023-06-02 | CONATECO | CO.NA.TE.CO. ( Consorzio Napoletano Terminal Containers ), è stato fon… |
CONFIRMED ATTACKS
Darkrace confirmed attacks: 2 verified incidents
Ransomnews has verified 2 Darkrace incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. All of them fall in June 2023. Switzerland accounts for 1 of them (50%), with victims recorded in 2 countries in total. The most affected sector is other, at 1 confirmed victim.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Darkrace incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| June 2023 | Vaud Promotion | Other | Pully, Switzerland | — | Unknown | Source |
| June 2023 | hep global GmbH | Manufacturing | Güglingen, Germany | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Darkrace's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.