Active ransomware operator

KAWA

0 victims indexed

Victims indexed

—

Active period

—

Countries hit

At a glance

Status: active
First seen: —
Last activity: —
Onion sites: 1 known endpoint

References

1 link

External sources curated by the MISP threat-intel community.

ransomlook.io/group/kawa

Recent victims

Loading…

Onion infrastructure

1 known

http://kawasa2qo7345dt7ogxmx7qmn6z2hnwaoi3h5aeosupozkddqwp6lqqd.onion

Source

Updated recently

Data on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.

Operator dossier

At a glance

References

Recent victims

Onion infrastructure

Source