Stormous — Hacktivist Profile
Stormous is a hacktivist group with ransomware affiliate operations, partnering with GhostSec to offer joint Ransomware-as-a-Service.Also tracked as
STMX_GhostLocker
Tools & malware
- GhostLocker 2.0 ransomware
- GhostPresser WordPress exploitation tool
- GhostSec Deep Scan tool reconnaissance tool
- StormousX ransomware
Recent claimed victims
- BN: higuchi-inc Report Error & Warning 2026-07-01
- HIGUCHI USA, INC 2026-06-28
- monoprix.tn 2026-06-28
- montechiaro-store.com UPDATE-FULL DATA DUMP FREE PART1 2026-06-28
- higuchi-inc.co.jp 2026-06-28
- eogb.co.uk 2026-06-28
- maglificioliliana.com UPDATE-FULL DATA DUMP FREE PART1 2026-06-28
- lorenzoni-store.com UPDATE-FULL DATA DUMP FREE PART1 2026-06-28
- eshacloudqa.com 2026-06-28
- Official Statement: Protecting palatineschool.org Infrastructure 2026-06-28
- impulso-store.com UPDATE-FULL DATA DUMP FREE PART1 2026-06-28
- Complete data belonging to customers and buyers 2026-06-24
- jaggroup.com UPDATE-FULL DATA DUMP NEW LINK 2026-06-24
- Complete data belonging to customers and buyers 2026-06-24
- Complete data belonging to customers and buyers 2026-06-24
- Over 400 GB of data 2026-06-24
- mlit.com.my UPDATE-FULL DATA DUMP NEW LINK 10GB 2026-06-24
- jaggroup.com UPDATE-FULL DATA DUMP 2026-06-21
- mlit.com.my UPDATE-FULL DATA DUMP 10GB 2026-06-19
- mlit.com.my 2026-06-12
- sa2000.com UPDATE-FULL DATA DUMP 2026-06-09
- katholiekamersfoort.nl UPDATE-FOR SALE 2026-06-09
- 150 GB of data 2026-06-04
- katholiekamersfoort.nl 2026-06-02
- vspsolutions.com.au 2026-05-13
Vendor research
- GhostSec's joint ransomware operation and evolution of their arsenal Cisco Talos
- Dark Web Profile: Who is 'Stormous Ransomware' Claiming to Leak Epic Games Information SOCRadar
- Dark Web Profile: GhostSec SOCRadar
- The Stormous Extortion Group Strikes Back KELA
- Coca-Cola Investigating Hack Claims Made by Pro-Russia Group SecurityWeek