// THREAT ACTOR
INSANE-RANSOMWARE_
DormantINSANE-RANSOMWARE is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of INSANE-RANSOMWARE — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2024 2
Leak site mirrors
6 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
nv5lbsrr4rxmewzmpe25nnalowe4ga7ki6yfvit3wlpu7dfc36pyh4ad.onionGoing insane snapshot · 2024-02-12 08:02 -
gfksiwpsqudibondm6o2ipxymaonehq3l26qpgqr3nh4jvcyayvogcid.onionGoing insane snapshot · 2024-02-12 08:02 -
gfksiwpsqudibondm6o2ipxymaonehq3l26qpgqr3nh4jvcyayvogcid.onionInane Right snapshot · 2024-02-12 08:03 -
nv5lbsrr4rxmewzmpe25nnalowe4ga7ki6yfvit3wlpu7dfc36pyh4ad.onionInane Right snapshot · 2024-02-12 08:03 -
r2ad4ayrgpf7og673lhrw5oqyvqg4em2fpialk7l7gxkasvqkqow4qad.onionGoing insane snapshot · 2024-02-12 08:03 -
r2ad4ayrgpf7og673lhrw5oqyvqg4em2fpialk7l7gxkasvqkqow4qad.onionInane Right snapshot · 2024-02-12 08:03
Recent victims
The 50 most recent victims claimed by INSANE-RANSOMWARE. Total in the index: 2.
| Date listed | Victim | Description |
|---|---|---|
| 2024-01-16 | JspPharma data | |
| 2024-01-16 | Victim list |