First listed
Victim claimtexanscan.org listed by chort
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor Claimedchort
Chort is a double-extortion ransomware group (whose name means "Devil" in Russian) that emerged in October 2024, primarily targeting US education and government sectors, with notable victims including the City of Sheboygan and Kuwait's Ministry of Finance.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
First listed
Victim claimTri-TechElectronics.com listed by chort
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedFirst listed
Victim claimpaaf.gov.kw listed by chort
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedLast observed
Indicator1 indicator cataloged
Types: onion.
Claimed
Victim claimsheboyganwi.gov listed by chort
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedClaimed
Victim claimhartwick.edu listed by chort
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedClaimed
Victim claimbartow.k12.ga.us listed by chort
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedClaimed
Victim claimedwardsburgschoolsfoundation.org listed by chort
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedIdentity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
chortCanonical Name
Loading CVEs, techniques, indicators, malware, victims, and activity...