Search threats, CVEs… ⌘K
← Back to all threat actors

d4rk4rmy

D4rk4rmy is a ransomware and data extortion group active since at least 2025, targeting financial services, hospitality, technology, and logistics sectors, operating a RaaS model with notable claimed victims including the Monte Carlo casino resort.

How we source and review actor profiles
Motivation
ransomware
Last seen
2025-08-16
Sectors
financial-services, professional-services, technology, hospitality, transportation, energy-utilities, manufacturing, education
Status
Dormant

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

First listed
Victim claimTHE MILLENNIUM GROUP listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimVINSON & ELKINS LLP listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Last observed
Indicator1 indicator cataloged

Types: onion.

First listed
Victim claimMMA TRANSFERS listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimBRIDGEWATER ASSOCIATES listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimMAGELLAN FINANCIAL GROUP listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimONEX CANADA ASSET MANAGEMENT INC listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimTSAI CAPITAL listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimMIZUHA FINANCIAL GROUP listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimCASINO DE MONTE-CARLO listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimDIMERCO listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimBIG ROCK RESORT listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimDigitall Evolution listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimVINHAS E REDENSCHI ADVOGADOS listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimBIG SILVER listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimMAFATE BUSINESS ENTERPRISE listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimUniversity of Puerto RicoRío Piedras Campus listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimTaiwan Digital Streaming Co Ltd listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimELZAB listed by d4rk4rmy

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

d4rk4rmyCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...