Inactive ransomware operator
← All groupsApt73
aka Eraleign · 141 victims indexed · first seen 2 years ago · last activity 23 days ago
At a glance
- Status
- inactive
- Aliases
- Eraleign
- First seen
- 2 years ago
- Last activity
- 23 days ago
- Onion sites
- 11 known endpoints
- Primary sector
- Business Services · 20 hits
About
References
4 linksExternal sources curated by the MISP threat-intel community.
Timeline
9 monthsTop countries
Top sectors
MITRE ATT&CK
6 techniques · 4 tacticsTactics
Recent victims
Loading…
Onion infrastructure
11 known- http://apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onion/
- http://basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion
- http://basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion/
- http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion
- http://basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
- http://bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion
- http://bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion
- http://eraleignews.com
- http://fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion
- http://fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion/
- http://wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion
Source
Updated 23 days agoData on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.
