Claimed
Victim claimBooneville School District listed by grief
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor Claimedgrief
Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files. It is recognizable by its trademark file extension added to encrypted files: .doppeled. It also creates a note file named: ".how2decrypt.txt".
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Last observed
Indicator1 indicator cataloged
Types: onion.
Claimed
Victim claimLancaster Independent School District listed by grief
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedClaimed
Victim claimClover Park School District listed by grief
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedIdentity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
griefCanonical Name
Loading CVEs, techniques, indicators, malware, victims, and activity...