Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

MONTI · Threat actor profile

// THREAT ACTOR

MONTI_

Dormant

MONTI is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of MONTI — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

112 Victims tracked
0 / 21 Active mirrors
2022-12-07 First listing
2025-05-10 Most recent

Victims by year

  • 2025 20
  • 2024 45
  • 2023 45
  • 2022 2

Leak site mirrors

21 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • 4s4lnfeujzo67fy2jebz2dxskez2gsqj2jeb35m75ktufxensdicqxad.onion 404 Not Found snapshot · 2022-10-10 22:12
  • mblogci3rudehaagbryjznltdp33ojwzkq6hn2pckvjq33rycmzczpid.onion MONTI - Leaks site snapshot · 2025-05-17 09:47
  • fzuaswymt34cbkneudijgqrzkalrgpsyfbo6uuodoeifwiqf3cwqscid.onion snapshot · 2024-11-19 17:18
  • oiatmncwdk6jnavutic5zusl4sttwschx7nicvqykluyckekex3zqaad.onion snapshot · 2024-11-19 17:19
  • jblxfrssnygh7bsoyict5wccgahvqp6tauncixr3y3dxypidiqy4tjyd.onion snapshot · 2024-11-19 17:20
  • egtqjenfxq7g6sqnjknww3tsnlutzqlq747cf73ni3xsfxzqqz2f5qad.onion snapshot · 2024-11-19 17:21
  • edaus74qljecooagcvcg67quldd2hwokkr5zqj5jtdeuidgjoesvwdad.onion Index of / snapshot · 2024-12-15 19:20
  • gchf5ohuxo36metdnt3hfdz6m4up3pmv6t6m63llvldtnh57guwnp4qd.onion Apache2 Ubuntu Default Page: It works snapshot · 2025-05-24 06:06
  • 363zyixg32bdudpakmd4n4bclbprcqrkyvdssv6yamozfurodktss2qd.onion Index of / snapshot · 2024-12-20 07:01
  • trqm74keteqm7jdathr2fgljf5tdhtifocoii4inmdu66ekpaotihvyd.onion Index of / snapshot · 2024-12-29 08:07
  • usmrktigxirv2qvpkwjr5n3pxz5hpsucffzujuo7e6f3y6se7uiqzwyd.onion Index of / snapshot · 2025-05-21 06:03
  • bvxhv3zfewf5jx4gcrsxrwbuwmjggffxjyv42vwj6b6u2clmgchxtfid.onion Index of / snapshot · 2025-05-30 05:02
  • drfxoorlgu5n4c4uhnfli7saprnl2p46i36duhyehmfp7ysn44e3quid.onion Index of / snapshot · 2024-12-28 08:12
  • t4h4hbkrrbrrfkbf6luhnewykjr52gkdmgfr6hbeeub5t2rcyhb4buad.onion Index of / snapshot · 2025-05-19 05:38
  • yyn3h2lnr5joqebus5syb2p3fzdms7avulvsn3m3gsdvwtgu2ow5c6ad.onion Index of / snapshot · 2025-05-19 05:00
  • v4httzsp6ri6xcw7lpmdduvhce5avtla3yocfru5suxpgcgo7rw7slyd.onion Index of / snapshot · 2025-05-19 05:09
  • myosbja7hixkkjqihsjh6yvmqplz62gr3r4isctjjtu2vm5jg6hsv2ad.onion Server Error snapshot · 2025-08-04 14:26
  • qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion snapshot · 2024-12-11 09:14
  • monti5o7lvyrpyk26lqofnfvajtyqruwatlfaazgm3zskt3xiktudwid.onion snapshot · 2025-08-04 14:09
  • il6jcce6f5htppc3smu4olpt5pz3akdg5h7k7tb4n45jixxu2o2oxlid.onion snapshot · 2025-05-26 13:16
  • cls2wzky5vxgu54fg4fqdj4q4olyvmwt6rinmtgqsq5d3vubv7bdzgqd.onion Directory listing for / snapshot · 2025-03-15 20:00

Recent victims

The 50 most recent victims claimed by MONTI. Total in the index: 112.

Date listed Victim Description
2025-05-10 American Eagle Logistics - Full Leak www.aeagleoilfield.com
2025-05-07 Amtech Software Enterprise Resource Planning (ERP) Software
2025-05-03 American Eagle Logistics - Press Release www.aeagleoilfield.com
2025-03-19 CD Full Leak
2025-03-19 Gloria Cales Full leak
2025-03-06 agi.net Architecture, Engineering & Design / Virginia, United States / 800 Emp…
2025-03-04 365labs - Security Corp Full leak
2025-03-04 Phoenix Full leak
2025-03-02 FM.GOB.AR Full leak
2025-02-12 Omni Fiber LLC Full database
2025-02-11 sole technology full leak
2025-01-31 ibericar Full Leak
2025-01-30 nenok.de Full leak
2025-01-30 FENSTERMAKER Full leak
2025-01-29 SCV Med Group Full leak
2025-01-28 lnetwork full leak
2025-01-28 Acoustiblok Household Goods
2025-01-28 BBLAWFIRM Lawyers
2025-01-28 metalurgica roma full leak
2025-01-22 Omni Fiber LLC - Press Release Full database
2024-12-22 ibericar - Press Release Auto Suckers
2024-11-26 Publications postponded ...
2024-11-20 Oxford Auto Insurance Insurance
2024-11-19 Anderson Miller LTD Hospitality
2024-11-19 Premier Tax Services Accounting Services
2024-11-19 KVF Industrial Machinery & Equipment
2024-11-19 Southern Oregon Veterinary Specialty Center Healthcare Services
2024-10-21 La Tazza D'oro - Full Leak Hospitality · Italy
2024-10-21 Burgess Kilpatrick - Full Leak Accounting Services
2024-10-21 Welding and Fabrication (Humble Mfg) - Full Leak Building Materials
2024-10-21 Phyton Biotech - Full Leak Business Services
2024-10-21 Cotala Cross-Media - Full Leak Business Services
2024-10-21 City Projects - Full Leak Canada
2024-10-21 Raeyco Lab Equipment - Full Leak Office Products Retail & Distribution
2024-10-21 Seng Tsoi Architect - Full Leak Architecture, Engineering & Design
2024-10-07 Richmond Auto Mall - Full Leak Automobile Dealers
2024-10-04 City Of Forest Park - Full Leak Georgia, United States
2024-09-03 bluemaven.ca problems additional information
2024-08-30 Burgess Kilpartik Burgess Kilpatrick is an accounting and professional services firm loc…
2024-08-30 Richmond Auto Mall Automobile Dealers
2024-08-30 Seng Tsoi Architect Architecture, Engineering & Design
2024-08-30 Raeyco Lab Equipment Systems Management Office Products Retail & Distribution
2024-08-30 Welding and Fabrication (humblemfg) Building Materials
2024-08-30 City Projects Commercial & Residential Construction
2024-08-30 Prism Construction Commercial & Residential Construction
2024-08-30 Cotala Cross-Media Business Services
2024-08-30 Phyton Biotech Business Services
2024-08-26 Blue Maven Group - Press Release Blue Maven provides extensive IT Procurement services.
2024-08-01 Adorna & Guzman Dentistry Dental
2024-07-24 forestparkga.gov City & PD

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.