Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimeddAn0n
dAn0n emerged in early 2024 operating a RaaS model, rapidly claiming 13 victims in May 2024 alone, predominantly targeting US-based organizations in business services and filling the vacuum left by disruptions to LockBit and BlackCat/ALPHV.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Types: onion.
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedThe interactive view includes 32 dated events with category filters and paging.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
Loading CVEs, techniques, indicators, malware, victims, and activity...