Inactive ransomware operator
← All groupsDonutleaks
42 victims indexed · first seen 4 years ago · last activity 2 years ago
At a glance
- Status
- inactive
- First seen
- 4 years ago
- Last activity
- 2 years ago
- Onion sites
- 7 known endpoints
- Primary sector
- Healthcare · 5 hits
About
References
4 linksExternal sources curated by the MISP threat-intel community.
Timeline
12 monthsTop countries
Top sectors
MITRE ATT&CK
5 techniques · 5 tacticsTactics
Recent victims
Loading…
Onion infrastructure
7 known- http://dk4mkfzqai6ure62oukzgtypedmwlfq57yj2fube7j5wsoi6tuia7nyd.onion
- http://dk4mkfzqai6ure62oukzgtypedmwlfq57yj2fube7j5wsoi6tuia7nyd.onion/index.php
- http://doq32rjiuomfghm5a4lyf3lwwakt2774tkv4ppsos6ueo5mhx7662gid.onion
- http://qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion
- http://sbc2zv2qnz5vubwtx3aobfpkeao6l4igjegm3xx7tk5suqhjkp5jxtqd.onion
- https://doq32rjiuomfghm5a4lyf3lwwakt2774tkv4ppsos6ueo5mhx7662gid.onion
- https://qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion
Source
Updated 2 years agoData on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.
