Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

KARAKURT · Threat actor profile

// THREAT ACTOR

KARAKURT_

Dormant

KARAKURT is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of KARAKURT — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

108 Victims tracked
0 / 10 Active mirrors
2022-08-18 First listing
2023-09-22 Most recent

Victims by year

  • 2023 32
  • 2022 76

Leak site mirrors

10 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • 3f7nxkjway3d223j27lyad7v5cgmyaifesycvmwq7i7cbs23lb6llryd.onion Magazine snapshot · 2024-08-02 08:03
  • www.karanews.live snapshot · 2023-06-16 14:02
  • www.karanews.live snapshot · 2023-06-16 14:02
  • karakurt.tech 403 Forbidden snapshot · 2025-03-29 00:04
  • karaleaks.com snapshot · 2026-08-02 19:34
  • omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion snapshot · 2024-12-10 04:31
  • 53dxw3yoeirahqn263a7ihzv2hhsjzdgvwqxdcuujlsrctmqzsph6tid.onion snapshot · 2024-12-11 09:48
  • jo7jezin3bmprlivyleqfv7rq3j4m36hd7bf2bguabxf2rlyrvrjwhad.onion snapshot · 2024-12-11 09:48
  • nrulhk2lbzt7jw6tnsq6gkjrn37j7uwfu5oxbuxezgherhuhakl2tqid.onion snapshot · 2024-12-11 09:48
  • t5sb509msc3q4ls06o1g8e4egfxl1o7e79yvlldakfphc0nf7rwiyphv.onion snapshot · 2024-12-12 15:22

Recent victims

The 50 most recent victims claimed by KARAKURT. Total in the index: 108.

Date listed Victim Description
2023-09-22 Hospice of Huntington Hospice of Huntington, Inc. is the first hospice in the State of West …
2023-09-22 Yakima Valley Radiology Yakima Valley Radiology PC is a company that operates in the Hospital …
2023-08-31 Valley Mountain Regional Center Valley Mountain Regional Center is a private company that serves child…
2023-08-30 Goodwill industries Goodwill was founded in Boston by Reverend Edgar J. Helms, a Methodist…
2023-08-02 COSI COSI, Columbus, Ohio's dynamic Center of Science and Industry, inspire…
2023-07-28 Regional Family Medicine Regional Family Medicine is a primary care group comprised of two sepa…
2023-07-28 McAlester Regional Health Center Founded in 1978, McAlester Regional Health Center is devoted to a cont…
2023-07-03 Jefferson County Health Center Jefferson County Hospital, Waurika, Oklahoma, is a 25-bed critical acc…
2023-06-28 CentroMed El Centro del Barrio (CDB), which started doing business as CentroMed …
2023-06-28 Pan Pacific Hotels Group Pan Pacific Hotels Group is a wholly-owned hotel subsidiary of Singapo…
2023-06-26 Reeds Spring School District Gibson Technical Center is a career and technical education school tha…
2023-06-21 Eastside Union School District Eastside Union School District seeks to provide an inclusive, challeng…
2023-06-05 Beacon ABA Services Beacon ABA Services, Inc. is a private group practice of behavior anal…
2023-05-23 Chattanooga Heart Institute The Chattanooga Heart Institute at Memorial offers a comprehensive mul…
2023-05-15 York County School of Technology York County School of Technology offers educational opportunities wher…
2023-05-12 Peachtree Orthopedics Since 1953, Peachtree Orthopedics has been serving the orthopedic need…
2023-04-29 Our Sunday Visitor Our Sunday Visitor is a Catholic publisher serving millions of Catholi…
2023-04-27 La Red Health Center La Red Health Center provides an outreach programs help reach undeserv…
2023-04-24 Lifeline Vascular Access Lifeline Vascular Access provides management services that streamline …
2023-04-24 TransMedics TransMedics, Inc., a medical device company, develops and provides por…
2023-04-24 Winona Powder Coating Winona Powder Coating is the largest provider of finishing services in…
2023-04-21 Wynn-Reeth Wynn-Reeth provides services to the client which will help the individ…
2023-04-18 Ozarks Community Hospital Founded in 1930 the Ozarks Community Hospital (OCH) of Gravette, AR is…
2023-04-17 Pharm-Pacc Corporation Pharm-Pacc Corporation is a provider of Managed Recovery Services to h…
2023-04-12 Petaluma Health Center The Petaluma Health Center is a Federally Qualified Health Center that…
2023-04-12 Medicalodges, Inc Founded in 1961, Medicalodges is a provider of healthcare services. Me…
2023-04-06 Officeworks Inc Officeworks Inc, has shared with us some of their employees with addre…
2023-03-31 OptionMetrics OptionMetrics provides its customers with databases of various busines…
2023-03-29 FINANCE INSTITUTION AUCTION We're happy to present you a brilliant 4TB stolen from a microfinance …
2023-03-28 MICROFINANCE INSTITUTION We're happy to present you a brilliant 4TB stolen from a microfinance …
2023-03-20 National Board of Osteopathic Medical Examiners The National Board of Osteopathic Medical Examiners (NBOME) is an inde…
2023-01-09 River City Science Academy River City Science Academy (RCSA) is a tuition-free, public charter sc…
2022-12-16 TLC TLC is a global brand available in more than 84 million homes in the U…
2022-11-21 Schrader-Pacific International Schrader-Bridgeport International is a company that operates in the Au…
2022-11-21 Stratus Stratus is a nationwide brand implementation company serving some of t…
2022-11-17 *СH*****-*A**F** International A company operates in the Automotive industry. It employs 100-250 peop…
2022-11-16 *С******-****F** International A company operates in the Automotive industry. It employs 100-250 peop…
2022-11-15 ********-******* International A company operates in the Automotive industry. It employs 100-250 peop…
2022-11-09 BauVal BauVal was founded in 1954 on the South Shore of Montreal and was firs…
2022-11-09 Centrisys cnp Centrisys is a USA manufacturer of decanter centrifuges for sludge dew…
2022-11-09 Roxboro Roxboro company operates in the construction industry. The company off…
2022-11-01 Urban Urban began as a collaboration between colleagues Bart O’Callahan and …
2022-11-01 The Summit The Summit is a physician-owned healthcare facility located in Hutchin…
2022-11-01 Urban Development Institute of Australia Urban began as a collaboration between colleagues Bart O’Callahan and …
2022-11-01 PTSC PTSC, a member of Vietnam Oil & Gas Group (PetroVietnam - PVN), was es…
2022-11-01 San Benito Consolidated Independent School District San Benito Consolidated Independent School District provides elementar…
2022-10-27 ipb Baggenstos Montagen ipb Baggenstos Montagen is a company that operates in Commercial & Res…
2022-10-27 Bergamo Metal Bergamo metal operates in the production and use of gypsum board and p…
2022-10-27 Medilife Hastanesi Medilife Hastanesi is a company that operates in the Restaurants indus…
2022-10-27 Qualified Staffing Founded in 1988 and headquartered in Flint, Michigan, Qualified Staffi…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.