RansomHouse — Ransomware Profile
This group started operating during the first quarter of 2022. They published samples of alleged stolen data from companies on their site on Tor. It is unclear if they conducted the attacks themselves, or if they bought leaked databases from third parties.IntelFusions coverage (1)
- Russian access broker's server exposes Ukraine spying 2026-08-03 · Cyber Incidents
Tools & malware
- Mario Ransomware
- MrAgent Deployment Tool
Recent claimed victims
- PCL Holding 2026-08-03
- Nichirei 2026-07-21
- Megawork 2026-07-16
- Fidelity Services Group 2026-07-15
- Bonacio 2026-06-29
- Prince George County 2026-06-17
- Promepla 2026-06-16
- Aegle Aviation 2026-06-08
- Ma Pak Leung Company Limited 2026-06-08
- Trellix (McAfee & FireEye) 2026-05-08
- Karl Chevrolet 2026-04-29
- Cybersecurity Vendor 2026-04-28
- Star Energy Geothermal Salak 2026-04-24
- Jiangsu Zenergy Battery Technologies Group Co., Ltd. 2026-04-21
- Winnitex (Americas) Limited 2026-04-17
- Transaction Packing Inc 2026-04-13
- Irec Sas 2026-03-13
- Bioptik Technology 2026-03-12
- Neinver 2026-02-27
- Accelerated Services 2026-02-27
- Warren County Sheriff’s Office 2026-02-18
- Associated Endocrinologists 2026-02-06
- Warren County Sheriff’s Office 2026-02-05
- Luxshare Precision Industry Co. Ltd. 2026-02-04
- Warren County Sheriff’s Office 2026-01-30