Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

MORPHEUS · Threat actor profile

// THREAT ACTOR

MORPHEUS_

Active

MORPHEUS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of MORPHEUS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

24 Victims tracked
1 / 1 Active mirrors
2025-01-07 First listing
2026-07-30 Most recent

Victims by year

  • 2026 12
  • 2025 12

Leak site mirrors

1 mirror tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • izsp6ipui4ctgxfugbgtu65kzefrucltyfpbxplmfybl5swiadpljmyd.onion MORPHEUS (contact [email protected]) snapshot · 2026-08-06 21:33

Recent victims

The 50 most recent victims claimed by MORPHEUS. Total in the index: 24.

Date listed Victim Description
2026-07-30 Yue Ki Industrial Website: yueki.com.tw Revenue: $21 Million Yue Ki Industrial is a manu…
2026-07-22 Kyowa Singapore Pte Ltd Website: kyowasingapore.com Revenue: $15 Million Founded in 1979 and h…
2026-07-06 Hansa Research Group Pvt. Ltd Website: hansaresearch.com Revenue: $22 Million Hansa Research is a gl…
2026-06-25 Delegal Poindexter & Underkofler, P.A. Website: protectingcareers.com Revenue: $5 Million Delegal Poindexter …
2026-06-10 HDFC FUND Website: hdfcfund.com Revenue: $427.8 Million HDFC Asset Management Co…
2026-06-08 3I INFOTECH Website: 3i-infotech.com Revenue: $96.8 Million 3i Infotech, incorpora…
2026-05-14 BAYTECH A/S Website: baytech.dk Revenue: $5 Million Baytech A/S is a Danish indust…
2026-04-21 GGI Website: ggitokiomarine.com Website: ggipinsurance.com Revenue: $19.2 …
2026-03-30 SBCTANZANIA Website: sbctanzania.co.tz Revenue: $42.5 Million SBC Tanzania Limited…
2026-03-20 SURTECHINC Website: surtechinc.kr Revenue: $5 Million Company is a leader in the …
2026-03-20 New publication
2026-01-29 SUNSETWORLDRESORTS Website: sunsetworldresorts.com Revenue: $593 Million Sunset World Gro…
2025-12-27 VALLEREDONDO Website: valleredondo.com.mx Revenue: $50 Million Family owned, founde…
2025-12-22 TEAMGLOBAL Website: teamglobal.com Revenue: $6.3 Million Premier contract and di…
2025-12-22 SCIPIONI Website: scipioni.be Revenue: $5 Million Scipioni is a company special…
2025-11-20 Teamglobal Website: teamglobal.com Revenue: $6.3 Million Premier contract and di…
2025-05-20 Landmark Properties Website: landmarkproperties.com Revenue: $1.5 Billion Landmark Propert…
2025-04-07 Latronica Law Firm, P.C Website: latronicalaw.com Revenue: $5 Million The Latronica Law is a f…
2025-04-07 Metal Sales Manufacturing Corporation Website: metalsales.us.com Revenue: $270.1 Million Metal Sales is the…
2025-04-01 Alora Pharmaceuticals, LLC Website: alorapharma.com acellapharma.com avionrx.com osmotica.com sov…
2025-02-25 Dinizulu Law Group LTD Website: dinizululawgroup.com Revenue: $5 Million Dinizulu Law Group, …
2025-01-17 LYNXSPA Website: lynxspa.com Revenue: $292.5 Million Lynx, the Partner for Dig…
2025-01-07 Arrotex Pharmaceuticals Website: https://dbghealth.com.au/arrotex/ Revenue: $92 Million The ex…
2025-01-07 Pus Gmbh Website: pus-gmbh.eu Revenue: $5 Million The P&S GmbH & Co. KG has spe…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.