Uptime Hamster: 21d 7h 22mDeploy: 3 Aug 2026 06:56Updated: 2026-07-21
Logo del actor de amenaza ransom

ransom

1 incidentes 1 paises 0 sectores Ultimo: 2026-07-09
Aliases: PLA Unit 61398 (Unidad 61398 del Ejército Popular Liberador), TG-8223, APT1, BrownFox, Group 3, GIF89a, ShadyRAT, Byzantine Candor, G0006, Numbered Panda, TG-2754 reflejan su conexión con actividades de espionaje, ciberespionaje, Sneaky Panda, Hydraq, SIG22, Elderwood Gang, G0066, Aurora
Ver en IntelTracker → APTTrail →

Aliases del actor

PLA Unit 61398 (Unidad 61398 del Ejército Popular Liberador)TG-8223APT1BrownFoxGroup 3GIF89aShadyRATByzantine CandorG0006Numbered PandaTG-2754 reflejan su conexión con actividades de espionajeciberespionajeSneaky PandaHydraqSIG22Elderwood GangG0066AuroraElderwood Projecteste grupo se destaca por su actividad en el sector privadotransporte marítimoaeronáuticaarmasenergíaTG-3279Winnti UmbrellaSabreKitkiotConpeeEtsoRunxxdnsenum

Actores similares

Red Ransomware Groupthreat-actor · 0Group Space Bearsransomware · 0contiransomware · 351Gamaredon Groupthreat-actor · 1devmanransomware · 184redransomwarethreat-actor · 2Silent Ransom Group / LeakedDataransomware · 0ragroupransomware · 0Global Groupransomware · 0Phalcon Ransomwareransomware · 0

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownduckduckgo.comFlash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware
DLS / leak siteunknownduckduckgo.comFlash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware
DLS / leak siteunknownduckduckgo.comBlurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs
DLS / leak siteunknownduckduckgo.comBlurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs
DLS / leak siteunknownduckduckgo.comApache ActiveMQ Exploit Leads to LockBit Ransomware
DLS / leak siteunknownduckduckgo.comApache ActiveMQ Exploit Leads to LockBit Ransomware
DLS / leak siteunknownduckduckgo.comFrom Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
DLS / leak siteunknownduckduckgo.comFrom Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
DLS / leak siteunknownduckduckgo.comFlash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
DLS / leak siteunknownduckduckgo.comFlash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
DLS / leak siteunknownduckduckgo.comHide Your RDP: Password Spray Leads to RansomHub Deployment
DLS / leak siteunknownduckduckgo.comHide Your RDP: Password Spray Leads to RansomHub Deployment
DLS / leak siteupransomware.anggipradana.comRansomware Victim: Allensbach Volunteer (thegentlemen)
Forodowngithub.comRansomware Group: ransomhub
DLS / leak siteunknownnitter.netRansomware Monitor: Actor: #Qilin Victim: NASCO Date: 2026-06-29 10:23:25 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#Qilin” Ransomware group has added NASCO to its victims.
X/Twitterunknownx.comRansomware Monitor: Actor: #nightspire Victim: Grupo Riquelme Date: 2026-06-26 03:15:53 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#nightspire” Ransomware group has added Grupo Riquelme to its victims.
DLS / leak siteunknownnitter.netRansomware Monitor: Actor: #Qilin Victim: AXIONLOG Date: 2026-06-29 10:23:27 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#Qilin” Ransomware group has added AXIONLOG to its victims.
DLS / onionunknownprinzfkbjiazbrur4mjje6mntjc4vydx3iatkkzycufoylqcoo4y7pqd.onionRansomware Victim: Driving School Software (PrinzEugen)
DLS / onionunknownprinzkpn6d3itrgcytmsmlcpt5mgwn3ihpck2hsed5cezlbtbi3wklid.onionRansomware Victim: Driving School Software (PrinzEugen)
DLS / onionunknownthreeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onionRansomware Victim: acemacon.org (threeam)
DLS / leak siteunknownwww.***.comRansomware Victim: Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik (thegentlemen)
DLS / leak siteunknownwww.***.comRansomware Victim: Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik (thegentlemen)
DLS / leak siteunknownwww.***.comRansomware Victim: Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik (thegentlemen)
DLS / leak siteunknownwww.tkmsgroup.comRansomware Victim: Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik (thegentlemen)
Victimas
1
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Victimas (1)

Ransom (Naming Taxonomies)9 Jul 2026
Reference United States
Que es Ransom es un actor de alto nivel (APT) asociado al Naming Taxonomies, un ecosistema de nombres de dominio y recursos cibernéticos. Este grupo, …