Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

OBSCURA · Threat actor profile

// THREAT ACTOR

OBSCURA_

Dormant

OBSCURA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of OBSCURA — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

34 Victims tracked
0 / 2 Active mirrors
2025-09-04 First listing
2026-01-12 Most recent

Victims by year

  • 2026 6
  • 2025 28

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • obscurad3aphckihv7wptdxvdnl5emma6t3vikcf3c5oiiqndq6y6xad.onion Obscura Leaks Blog snapshot · 2026-03-07 01:15
  • obscurad3aphckihv7wptdxvdnl5emma6t3vikcf3c5oiiqndq6y6xad.onion Obscura Leaks Blog snapshot · 2026-03-07 01:11

Recent victims

The 50 most recent victims claimed by OBSCURA. Total in the index: 34.

Date listed Victim Description
2026-01-12 CleverPower Technology leader for modern energy infrastructure
2026-01-12 Trend Import Export IT company specializing in enterprise solutions and hardware
2026-01-12 Thai Petroleum & Trading Thai Petroleum & Trading Co., Ltd. had been the sole importer and dist…
2026-01-12 Revoil Revoil trades fuels and lubricants through its network of petrol stati…
2026-01-12 STC Concrete Product STC Concrete Product Public Company Limited engages in the manufacture…
2026-01-12 REDtone REDtone International is a telecommunications service provider for to …
2025-12-15 cle**rp**er.eu Technology leader for modern energy infrastructure
2025-12-15 k*m**w.com Transportation & Warehousing
2025-12-13 ACE Forwarding Ace Forwarding offers several methods of protecting your freight. Full…
2025-12-13 Startek Engineering Inc. STARTEK is a worldwide leading company in the fingerprint identificati…
2025-12-13 StanleyCo Malaysia StanleyCo Malaysia provides expert accounting, tax advisory, company i…
2025-12-13 New Obscura 2.0! We present the new version of Obscura 2.0. Faster encryption mechanism…
2025-11-01 New Toyo International Holdings Ltd
2025-10-30 Thompson Dorfman Sweatman
2025-10-29 Federal Auto Holdings Berhad
2025-10-20 Cape Dara Resort Pattaya
2025-10-13 michigancityin.gov
2025-09-28 relationmedia.dk
2025-09-28 meamargroup.com
2025-09-28 plazadental.com
2025-09-28 heavenly-dental.com
2025-09-28 thefixingcompany.com
2025-09-28 eastdesign.com.my
2025-09-28 espectral.pt
2025-09-28 *city*.gov
2025-09-18 EAST Design Architect Sdn. Bhd Design agency in Malaysia, Penang
2025-09-18 Espectral Espectral specializes in providing testing and measurement equipment, …
2025-09-05 RelationMedia A/S RelationMedia A/S is the leading agency in Denmark within sales forces…
2025-09-04 Rulmaksan Makina Rulmaksan Makina is a company that operates in the Consumer Services i…
2025-09-04 The Fixing Company The Fixing Company is an Irish provider of premium fixing solutions sp…
2025-09-04 HeavenlyDental Dental clinics in San Jose
2025-09-04 Plazadental Dental clinics in San Jose
2025-09-04 WZV Warndt Der WasserZweckVerband Warndt ist ein kommunaler Zweckverband, dessen …
2025-09-04 MeamarGroup Specializes in real estate development, contracting, and investment se…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.