Close Menu

SUNCRYPT · Threat actor profile

// THREAT ACTOR

SUNCRYPT_

Dormant

SUNCRYPT is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of SUNCRYPT — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

30 Victims tracked
0 / 2 Active mirrors
2021-09-09 First listing
2022-06-18 Most recent

Victims by year

  • 2022 15
  • 2021 15

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • x2miyuiwpib2imjr5ykyjngdu7v6vprkkhjltrk4qafymtawey4qzwid.onion News snapshot · 2023-05-02 12:05
  • nbzzb6sa6xuura2z.onion snapshot · 2021-09-08 00:03

Recent victims

The 50 most recent victims claimed by SUNCRYPT. Total in the index: 30.

Date listed Victim Description
2022-06-18 SOCOTEC
2022-06-04 Northeastern Technical College
2022-04-24 Co-opbank Pertama
2022-04-16 DJS associate
2022-04-14 Gemeente Buren
2022-04-14 Atlas Copco
2022-03-28 Oklahoma City Indian Clinic
2022-03-17 FitFlop Ltd.
2022-03-16 Migros
2022-02-22 Royal Smilde
2022-02-21 CENTRAL BAPTIST COLLEGE
2022-02-15 KVK Tech | Specialty Brands and Generics
2022-02-08 Heartland Alliance
2022-02-08 Community Health Center | Valle del Sol
2022-02-05 Consumers Supply Distributing LLC
2021-12-03 Bohlin Cywinski Jackson
2021-11-30 Read more
2021-11-19 Hospitality Furnishings & Design Inc.
2021-11-19 Herman & Kittle Properties Inc.
2021-11-05 Outdoor Venture Corporation (OVC)
2021-09-09 Tri-signal Intergration
2021-09-09 Glen Dimplex Home Appliances
2021-09-09 Grushwitz
2021-09-09 Mark A. O'neal and Associates
2021-09-09 AGSO
2021-09-09 Dean and Fulkerson
2021-09-09 SB Zantal Markt
2021-09-09 JSW Steel USA
2021-09-09 PRP diagnostic imaging
2021-09-09 Cornerstone Automation Systems, LLC

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.