Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

PYRX · Threat actor profile

// THREAT ACTOR

PYRX_

Dormant

PYRX is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of PYRX — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

11 Victims tracked
0 / 4 Active mirrors
2024-07-03 First listing
2024-10-18 Most recent

Victims by year

  • 2024 11

Leak site mirrors

4 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • c2mdhim6btaiyae3xqthnxsz64brvdxsnbty4tvos65zb565y4v55iid.onion end or a new era? snapshot · 2025-04-17 11:08
  • c2mdhim6btaiyae3xqthnxsz64brvdxsnbty4tvos65zb565y4v55iid.onion 404 Not Found snapshot · 2025-04-17 11:10
  • c2mdhim6btaiyae3xqthnxsz64brvdxsnbty4tvos65zb565y4v55iid.onion 404 Not Found snapshot · 2025-04-17 12:03
  • pyrx.cc 嘉茗轩旗下平远信息网 snapshot · 2026-08-03 15:01

Recent victims

The 50 most recent victims claimed by PYRX. Total in the index: 11.

Date listed Victim Description
2024-10-18 Nigeria 29 victim - October 18, 2024 Nigerian sites wwwroot leaked
2024-09-29 Barbados Gov Breach - September 29, 2024 230GB of uncompressed data - driver's licenses, social identification,…
2024-09-04 Kudzu telegram bot - September 4, 2024 This is an advertisement for a pretty good scraping bot, I personally …
2024-08-26 RCBC.edu - July 4, 2024 Rowan College at Burlington County 30k students records leaked at pryx…
2024-08-26 wwwroot of uae gov - May 2, 2024 WWWroot Documents and internal logs of UAE gov and multiple UAE gov si…
2024-08-26 Criminal Psychology - July 4, 2024 A snippet from my book, Criminal Psychology.
2024-08-26 Pryx fanbase - July 5, 2024 Some niggers are trying hard to be me, pryx fake clones!
2024-08-26 saudi gov breach - July 5, 2024 extorting saudi gov for some cash, cuz we r broke!
2024-07-11 Uae gov breach
2024-07-10 Rcbc data download
2024-07-03 RCBC.edu Data Breach: over 30,000 University Applications Exposed

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.