Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

RANSOMWARE-BLOG · Threat actor profile

// THREAT ACTOR

RANSOMWARE-BLOG_

Dormant

RANSOMWARE-BLOG is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of RANSOMWARE-BLOG — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

61 Victims tracked
0 / 3 Active mirrors
2023-04-18 First listing
2025-12-29 Most recent

Victims by year

  • 2025 15
  • 2024 5
  • 2023 41

Leak site mirrors

3 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • z6wkgghtoawog5noty5nxulmmt2zs7c3yvwr22v4czbffdoly2kl4uad.onion Ransomware blog – We will not give ourselves a name. Just watch out for the leakage of your data:) snapshot · 2025-11-18 23:02
  • qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion Submit a Ticket snapshot · 2026-04-06 23:03
  • 6i42qq2xdu244a3xp2c3gjvcwtp3hurbajesfnsuga2v3frf6x7ivcyd.onion Submit a Ticket snapshot · 2026-04-06 23:32

Recent victims

The 50 most recent victims claimed by RANSOMWARE-BLOG. Total in the index: 61.

Date listed Victim Description
2025-12-29 voltechrebuilders.com voltechrebuilders.com There are many documents. Password to view test …
2025-12-29 teknequip.com teknequip.com Contracts, projects, banking documents. Password for vie…
2025-12-29 powerscourt.com powerscourt.com A lot of private information, bank transfers, clients,…
2025-12-29 Taiwan Hospital Taiwan Hospital A large number of personal documents of the clinic&#x2…
2025-12-29 kelseyschooldivision.ca kelseyschooldivision.ca Documents for students, parents, staff, and sp…
2025-12-29 rene.co.ug rene.co.ug A lot of confidential information. Password for viewing tes…
2025-11-18 dulay.ca Price-$40000 (sale in one hand there are options for making a profit f…
2025-09-15 usenergy Price-$120000 (sale in one hand there are options for making a profit …
2025-08-06 Looking for pentesters looking for pentesters: IF YOU DON’T HAVE ACCESS, PLEASE DON’T WASTE Y…
2025-05-30 UnigazJordan www.unigaz.net $690.6 Million The list of files is available at the li…
2025-05-29 Mulia Raya www.muliaraya.co.id $34.8 Million The list of files is available at th…
2025-03-25 Curtain Bluff  www.curtainbluff.com Curtain Bluff files Vacationer information (perso…
2025-02-28 Inversiones Clinica Del Meta SA www.clinicameta.co Description employee information – patient informat…
2025-02-12 MICRO MANUFACTRING Micro Manufacturing Inc. Descriptionemployee information – agreement –…
2025-01-08 bendixengineering Descriptionemployee information – agreement – customer email(.xls)-.ms…
2024-11-26 SILKNET COMPANY URL:https://silknet.com https://geocell.ge/ On sale:Company email base…
2024-11-26 SILKNET On sale:Company email base(about 1tb)Customer dataCompany audit for 20…
2024-05-09 Protected: HIDE NAME There is no excerpt because this is a protected post.
2024-05-01 SHAMASS.ORG Descriptionemployee information – agreement – customer email(.xls)-.ms…
2024-04-26 Protected: HIDE NAME SELL DATA SOON There is no excerpt because this is a protected post.
2023-12-05 skalar.com Descriptionemployee information – agreement – customer email(.xls)- pa…
2023-11-29 Protected: Name is hidden There is no excerpt because this is a protected post.
2023-11-29 Protected: skalar.com There is no excerpt because this is a protected post.
2023-10-23 Ada-Borup-West School Descriptionemployee information – student information – all contracts …
2023-10-23 wellons.org Descriptionemployee information – agreement – customer email(.xls)- ps…
2023-10-02 Confidential files A large number of documents of large companies are available for sale …
2023-08-03 INSULCANA CONTRACTING LTD Descriptionemployee information – agreement – customer email(.xls)- pa…
2023-07-28 Protected: INSULCANA CONTRACTING LTD There is no excerpt because this is a protected post.
2023-07-17 Protected: Hidden name There is no excerpt because this is a protected post.
2023-07-05 Hoosier Equipment company DescriptionClient Case – agreement – email(.msg)- and other documents …
2023-07-02 Ucamco Belgium DescriptionClient Case – customers email-Audit information-There is al…
2023-06-24 reutlingen.ihk.de DescriptionClient Case – agreement – email(.msg)- contracts – and othe…
2023-06-24 Hausamman company DescriptionClient Case – customers email-documents PRICE-$20000
2023-06-24 kafflogistic.hu DescriptionClient Case – agreement – email(outlook files)- contracts –…
2023-06-24 SELL DATA(qtox) Available for sale: to buy please contact qtox price negotiable qtox-E…
2023-06-14 Jalux Americas, Inc. DescriptionClient Case – agreement – email(.msg) – and other documents…
2023-06-14 arborsct.com DescriptionClient Case – agreement – email(.msg)- and other documents …
2023-06-02 LETAPE JEUNES DescriptionClient Case – agreement – email(.msg)- contracts – and othe…
2023-04-18 MIDAS Company Description Client Case – Passports – Driver license – SSN – email(pst…
2023-04-18 AURIS KONINKLIJKE AURIS GROEP DescriptionClient Case – photo – email(outlook) – and other documents …
2023-04-18 fidelityunited.ae DescriptionClient Case – photo – passport – email(outlook) – and other…
2023-04-18 goldcreekfoods DescriptionClient Case – agreement – email(.msg) – and other documents…
2023-04-18 exheat.com DescriptionClient Case – agreement – email(.msg)-product drawings(.dwg…
2023-04-18 hwrpc.com DescriptionClient Case – agreement – email(.msg)- and other documents …
2023-04-18 Salmon Software DescriptionClient Case – agreement – email(.msg)- passport- and other …
2023-04-18 tristatefabricators_inc The whole server with data, with drawings, clients and .msg letters is…
2023-04-18 HOW TO BUY DATA? If you decide to purchase passports, drawings and other information fr…
2023-04-18 bsw-architects.com DescriptionClient Case – agreement – email(.msg)- contracts – and othe…
2023-04-18 Fonderia Boccacci Description Client Case – drafts – and other documents Price: 10000$ T…
2023-04-18 Zelena Laguna Hotel Description Client Case – Passports – Driver license – SSN – and other…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.