Dark Project — Ransomware Profile

Dark Project is an extortion operation that WatchGuard classifies as a data broker and records as first seen in April 2026. WatchGuard lists 19 known victims and reports direct extortion, double extortion and free data leaks. Alongside its main Tor leak site the group runs eight separate Tor file server hosts for published datasets, and publishes an email address and a Tox identifier as victim contact channels.

Recent claimed victims

Vendor research

Read the full analysis on IntelFusions