Active ransomware operator

Haron

0 victims indexed · last activity 4 years ago

Victims indexed

—

Active period

—

Countries hit

At a glance

Status: active
First seen: —
Last activity: 4 years ago
Onion sites: 2 known endpoints

About

Auto-discovered from ransomware tracking sources

References

3 links

External sources curated by the MISP threat-intel community.

therecord.media/new-haron-ransomware-gang-emerges-borrowing-from-avaddon-and-thanos
threatpost.com/ransomware-gangs-haron-blackmatter/168212
ransomlook.io/group/haron

Recent victims

Loading…

Onion infrastructure

2 known

http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion
http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion/login.php

Source

Updated 4 years ago

Data on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.