THREAT ACTOR
FRAG_
DormantFRAG is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of FRAG, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2025 30
Leak site mirrors
4 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
xhvzsaxl3vbio6dg547envq5xgap3pwobtursdvwatdoxextv43kb7id.onionsnapshot · 2025-03-22 18:22 -
34o4m3f26ucyeddzpf53bksy76wd737nf2fytslovwd3viac3by5chad.onionFrag Blog snapshot · 2025-09-12 03:11 -
34o4m3f26ucyeddzpf53bksy76wd737nf2fytslovwd3viac3by5chad.onionFrag Blog snapshot · 2025-09-12 03:19 -
34o4m3f26ucyeddzpf53bksy76wd737nf2fytslovwd3viac3by5chad.onionsnapshot · 2025-07-22 13:09
Recent victims
The 50 most recent victims claimed by FRAG. Total in the index: 30.
| Date listed | Victim | Description |
|---|---|---|
| 2025-06-12 | Cryoviva | Singapour | Healthcare services | Cryoviva is now one of the leading private cord blood banks in Singapo… |
| 2025-06-11 | Evasa | Argentina, Buenos Aires | Construction | Evasa is an environmental engineering company.Our team was successful … |
| 2025-04-04 | Source Photonics | USA, West Hills, CA | Telecommunications | Source Photonics is a leading global provider of innovative and reliab… |
| 2025-03-24 | SEAQUEST SEAFOOD | USA, City Of Industry, CA | Wholesale | Seaquest Seafood specializes in processing, imports, and wholesale dis… |
| 2025-03-24 | Woodbine Hospitality | USA, Syracuse, New York | Hospitality Woodbine Hospitality is a family of companies that cont… |
| 2025-03-24 | Superior Technology, Inc. | USA, Rochester, NY | Machinery Manufacturing Superior Technology, Inc. are a family owne… |
| 2025-03-24 | Stuwarooij | Netherlands, Zaltbommel, Gelderland | Transportation, Logistics, Supply Chain and Storage For over 25 yea… |
| 2025-03-24 | STATEWIDE ENTERPRISES | USA, Los Angeles, CA | Real Estate Statewide Enterprises is a full-service property manage… |
| 2025-03-24 | Southwest Inspection and Testing | USA, La Habra, California | Commercial & Residential Construction Southwest Inspection and Test… |
| 2025-03-24 | Salvi, Schostok & Pritchard P.C. | USA, Chicago, Illinois | Law Practice Your IL Medical Malpractice and Personal Injury Attorn… |
| 2025-03-24 | QUILTCRAFT | USA, Dallas, Texas | Household Goods Quiltcraft offers an extensive line of products and… |
| 2025-03-24 | Rahnama Law | USA, Culver city , California | Legal Services Proudly protecting the rights of innocent victims si… |
| 2025-03-24 | Opulent | Singapore, Singapore | Appliances, Electrical, and Electronics Manufacturing A one-stop el… |
| 2025-03-24 | Nelson Law Firm | USA, Waterloo, Iowa | Law Firms & Legal Services Nelson Law Firm specializes in knowing t… |
| 2025-03-24 | Komoto Healthcare | USA, Bakersfield, CA | Hospitals and Health Care Komoto Healthcare is a group of specialty… |
| 2025-03-24 | iTEK Services, Inc. | USA, Lake Forest, CA | IT Services and IT Consulting Retail is a core competency; however … |
| 2025-03-24 | Moody Homes | USA, Virginia Beach, VA | Real Estate Moody Development Corporation builders and developers o… |
| 2025-03-24 | Red Credit solution, LLC | USA, Omaha, NA | Business Services Red Credit Solutions is a debt collection and pur… |
| 2025-03-24 | Maine Highlands Federal Credit Union | USA, Dexter, Maine | Banking CUSO Mortgage Corporation - CUSO Mortgage Corp. is a licens… |
| 2025-03-24 | Lake Beverage Corp. | USA, West Henrietta, NY | Wholesale Lake Beverage is a family-owned business that sells and d… |
| 2025-03-24 | Kontane Logistics, Inc. | USA, Charleston, SC | Business Services Founded in 1975, Kontane Logistics, Inc. offers a… |
| 2025-03-24 | FRANKLIN PRODUCTS | USA, Torrington, CT | Airlines and Aviation Franklin Products, seat frame manufacturers a… |
| 2025-03-24 | Texas Fifth Wall Roofing Systems | USA, Austin, TX | Construction Texas Fifth Wall Roofing Systems, founded in 1973, wor… |
| 2025-03-24 | Ellis Glass and Mirror Ltd | USA, Woodstock, ON | Construction Ellis Glass and Mirror Ltd has been supplying contract… |
| 2025-03-24 | Community Management, Inc. | USA, Portland, OR | Business Consulting and Services CMI is an Oregon Corporation headq… |
| 2025-03-24 | California Gasket and Rubber Corporation | USA, Orange, CA | Aviation and Aerospace Component Manufacturing California Gasket an… |
| 2025-03-24 | Bunting Capital Management Inc | USA, Virginia Beach, VA | Finance Bunting Capital Management, located in Virginia Beach, is a… |
| 2025-03-24 | AeroWorx | USA, Torrance, CA | Aviation and Aerospace Component Manufacturing AeroWorx has quickly… |
| 2025-03-24 | Andrew Davidson & Co., Inc. | USA, New York, NY | Financial Services Andrew Davidson & Co., Inc. is a leading provide… |
| 2025-03-24 | AmeriKen Die Supply, Inc | USA, Wood Dale, IL | Packaging and Containers Manufacturing A leader and innovator in th… |
CONFIRMED ATTACKS
Frag confirmed attacks: 3 verified incidents
Ransomnews has verified 3 Frag incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from October 2024 to November 2024. United States accounts for 3 of them (100%). The most affected sector is service, at 1 confirmed victim. Where a figure was disclosed (1 case), these incidents account for 644 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Frag incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| November 2024 | Texas Fifth Wall Roofing Systems | Construction | Texas, United States | 644 | Unknown | Source |
| November 2024 | Andrew Davidson & Co., Inc. | Finance | New York, United States | — | Unknown | Source |
| October 2024 | Statewide Enterprises, Inc. | Service | California, United States | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Frag's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.