// THREAT ACTOR

DYSPHOR1A_

Active

DYSPHOR1A is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of DYSPHOR1A — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

10 Victims tracked

1 / 2 Active mirrors

2026-08-29 First listing

2026-09-06 Most recent

Victims by year

2026 10

Leak site mirrors

2 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

y3maveiwszbnrziufbbberx74cvrdcsf72nxzuqxzv7ppdmmqzffazid.onion DYSPHOR1A Ransomware Group snapshot · 2026-09-09 00:01
normalhunters0x.surge.sh Chrome Dino Game snapshot · 2026-09-14 02:07

Recent victims

The 50 most recent victims claimed by DYSPHOR1A. Total in the index: 10.

Date listed	Victim	Description
2026-09-06	RTAD GOV MM	Leaked: New \| Sector: Government / Transport \| Country: 🇲🇲 Myanmar \| R…
2026-09-05	CitizensPay	Sector: Digital Wallet / Payment Platform \| Country: 🇲🇲 Myanmar \| Reco…
2026-09-04	MBT Telecom	For Sale: New \| Sector: Telecommunications / ISP \| Country: 🇲🇲 Myanmar…
2026-08-29	Yoma Fleet	Sector: Business / Vehicle Leasing \| Country: 🇲🇲 Myanmar \| Records: Or…
2026-08-29	AYUDHYA TH Insurance	Sector: Financial / Insurance \| Country: Thailand \| Records: Internal …
2026-08-29	GUSTO College GLMS	Sector: Education Sector \| Country: 🇲🇲 Myanmar \| Records: User account…
2026-08-29	Job Net .COM.MM	Sector: Business \| Country: Myanmar \| Records: ~500++ user accounts an…
2026-08-29	The University of Delhi (DU)	Sector: Education Sector \| Country: 🇮🇳 India \| Records: Student record…
2026-08-29	Indonesian Police Database	Sector: Government / Law Enforcement \| Country: Indonesia \| Records: 5…
2026-08-29	Netim Company	Sector: Business / Domain Registrar \| Country: 🇫🇷 France \| Records: So…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.