First listed
Victim claimExport Hub listed by cryptnet
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor Claimedcryptnet
According to OALabs, this ransomware has the following features: * Files are encrypted with AES CBC using a generated 256 bit key and IV.* The generated AES keys are encrypted using a hard coded RSA key and appended to the encrypted files.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
First listed
Victim claimUrban Import listed by cryptnet
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedLast observed
Indicator2 indicators cataloged
Types: onion.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
cryptnetCanonical Name
Loading CVEs, techniques, indicators, malware, victims, and activity...