// THREAT ACTOR
ERALEIGN-APT73_
ActiveERALEIGN-APT73 is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of ERALEIGN-APT73 — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
177
Victims tracked
11 / 15
Active mirrors
2024-04-23
First listing
2026-07-24
Most recent
Victims by year
- 2026 59
- 2025 46
- 2024 72
Leak site mirrors
15 mirrors tracked, 11 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
eraleignews.comAccess Blocked snapshot · 2024-06-22 10:03 -
wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onionAPT73 snapshot · 2024-08-29 06:04 -
basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onionBASHE snapshot · 2026-08-06 21:10 -
bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onionsnapshot · 2026-08-06 21:03 -
basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onionBASHE snapshot · 2026-08-06 21:40 -
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onionBASHE snapshot · 2026-08-06 21:29 -
bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onionBASHE snapshot · 2026-08-06 21:41 -
bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onionBASHE snapshot · 2026-08-06 21:16 -
7bbqrijcds5sgji3kiwo5o5qgxfgoyufykhzfdo6xl3qbdes2e7tdyad.onionsnapshot · 2024-12-11 11:15 -
bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onionsnapshot · 2026-08-06 21:08 -
bashed52orwi7qoyvmcfkdnuaogta4inpojfd6cthzkp4qpsq64ux4ad.onionsnapshot · 2026-08-06 21:15 -
bashedl53memptddxzb4kr5mnkzse4fmhpqeq7jb4srndswar46nofid.onionsnapshot · 2026-08-06 21:33 -
bashefe5uezp2jtxpk24b2pyfnnfyguicgrgqufgu57mfluegotbeayd.onionsnapshot · 2026-08-06 21:03 -
bashei5oy4zvmf2letnupwhgprdkjyssm3zxj2oyr6wfezkf3elehzqd.onionsnapshot · 2026-08-06 21:15 -
qku4reiyfcs2vqq5tow2uprhyqhweo56lrgs6457svr3ej4ton5frkad.onionsnapshot · 2024-12-11 11:16
Recent victims
The 50 most recent victims claimed by ERALEIGN-APT73. Total in the index: 177.
| Date listed | Victim | Description |
|---|---|---|
| 2026-07-24 | metrabyte.cloud | metrabyte.cloud is the website of Metrabyte Cloud Co., Ltd., a cloud s… |
| 2026-07-06 | dgcement.com | dgcement.com — this is the website of D.G. Khan Cement Company Limited… |
| 2026-07-06 | azarestan.com | azarestan.com (Azarestan Business Development Group) is a holding comp… |
| 2026-07-06 | vicentetrapani.com | vicentetrapani.com — this is the website of Vicente Trapani S.A., an a… |
| 2026-07-06 | westernint.com | Western International Group is a large private conglomerate based in D… |
| 2026-07-03 | aydeniz.com | Aydeniz Group is a family-owned group of companies founded in 1975, op… |
| 2026-07-02 | flazio.com | lazio.com — this is a company from Italy. Flazio is a website builder … |
| 2026-07-02 | holidaypalace.com | Holiday Palace Hotel in Spain. Guest information, internal documents, … |
| 2026-07-02 | ritavo.com | ritavo.com is the website of Rita Võ Group, a private multidisciplinar… |
| 2026-06-29 | viennaairport.com (SOLD TO 3RD PARTY) | SOLD TO 3RD Party! No DATA AVALIABLE! Vienna Airport (Flughafen Wien A… |
| 2026-06-23 | gov.br | Gov.br — this is the official state digital platform and domain zone o… |
| 2026-06-23 | kliknklik.com | KliknKlik.com — a company from Indonesia, an online retailer and distr… |
| 2026-06-23 | viennaairport.com | Vienna Airport (Flughafen Wien AG) is an Austrian company, the operato… |
| 2026-06-03 | smarty.arpinet.am | arpinet.am - it is an online platform for managing real estate data in… |
| 2026-06-02 | elections.mia.gov.am from WOLVES OF TURAN | Hello, dear visitors of Bashe's blog. Today, we contacted the Turkish … |
| 2026-05-22 | tkgm.gov.tr | TKGM (Tapu ve Kadastro Genel Müdürlüğü) is a government agency from Tu… |
| 2026-05-22 | minsa.com.mx | Minsa is a company from Mexico, one of the largest producers of nixtam… |
| 2026-05-22 | tvnmedia.com | TVN Media is a multimedia company from Panama, engaged in broadcasting… |
| 2026-05-21 | grupopetersen.com.ar | Grupo Petersen is a multidisciplinary financial and industrial group f… |
| 2026-05-21 | alkaloid.com.mk | Alkaloid is a pharmaceutical company from Northern Macedonia, founded … |
| 2026-05-21 | narit.or.th | The National Astronomical Research Institute of Thailand (Thailand's N… |
| 2026-05-21 | ungererandcompany.com | Ungerer & The Company is an American company founded in 1893 that deve… |
| 2026-04-27 | providentgh.com | Provident Insurance Limited Company is an insurance company in Ghana t… |
| 2026-04-27 | medikaplaza.com | Medika Plaza is a healthcare company in Indonesia that provides medica… |
| 2026-04-27 | jgpetrucci.com | J.G. Petrucci Company, Inc. is a real estate development and construct… |
| 2026-04-27 | grupo-principal.com | Grupo Principal is a distribution company in Mexico that supplies and … |
| 2026-04-27 | cofaco.com | Cofaco Industries S.A.C. is a textile company in Peru, which produces … |
| 2026-04-27 | dunav.com | Dunav Insurance Company is an insurance company in Serbia that provide… |
| 2026-04-27 | algosaibi-gtb.com | Abdulaziz & Saad Almoosaibi & GBT (Al‑Gosaibi GTB) is an industrial co… |
| 2026-04-27 | alx-pc.com | Alexandria Petroleum Company (APC) is a state—owned oil refining compa… |
| 2026-04-27 | arrawdah.org.sa | Al Rawdah Cooperative Society is a cooperative organization in Saudi A… |
| 2026-04-13 | ifmis.go.ke | Integrated Financial Management Information System (IFMIS) is a govern… |
| 2026-04-13 | whessoe.com.my | Whessoe Engineering (Malaysia) Sdn Bhd is an engineering company in Ma… |
| 2026-04-13 | olpro.com.my | OLPRO Engineering Sdn Bhd is an engineering company in Malaysia that d… |
| 2026-04-13 | phb.com | PHB Inc. is an industrial company in the United States that manufactur… |
| 2026-04-09 | egov.sc | eGov Seychelles is a government portal in Seychelles that provides onl… |
| 2026-04-09 | asunim.co | Asunim is a company operating in the field of renewable energy, which … |
| 2026-03-26 | ires.ma | Institut Royal des Études Stratégiques is a state—owned analytical cen… |
| 2026-03-26 | 2m.ma | 2M TV (2m.ma ) is a national television channel in Morocco, which is e… |
| 2026-03-26 | centrum.sk | Centrum.sk (centrum.sk ) is an online portal in Slovakia that provides… |
| 2026-03-26 | iam.ma | Maroc Telecom is a telecommunications company in Morocco that provides… |
| 2026-03-17 | dpwh.gov.ph | Department of Public Works and Highways is a government agency in the … |
| 2026-03-17 | doghairinc.com | Dog Hair INCluded is a small company (online brand) that sells pet acc… |
| 2026-03-17 | vanheyghenstaal.be | Van Heyghen Staal is a metallurgical company in Belgium, which is enga… |
| 2026-03-17 | isosl.be | ISOSL is an engineering company in Belgium, which deals with industria… |
| 2026-03-12 | moccae.gov.ae | The Ministry of Climate Change and Environment (moccae.gov.ae) is a go… |
| 2026-03-12 | shj.ae | Sharjah Electricity, Water, and Gas Authority (sec.shj.ae) is a govern… |
| 2026-03-12 | gedco.ps | gedco.ps is the website of the Gaza Electricity Distribution Company (… |
| 2026-03-12 | haca.ma | haca.ma is the official website of the High Authority for Audiovisual … |
| 2026-03-11 | seit.cl | seit.cl is the website of SEiT S.p.A., a company providing IT services… |