HelloGookie is a rebrand of the HelloKitty ransomware group announced in April 2024, releasing previously stolen data from CD Projekt Red and Cisco; HelloKitty/HelloGookie has been active since 2020 with its highest-profile attack being the 2021 breach of CD Projekt Red.
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedTypes: onion.
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Loading CVEs, techniques, indicators, malware, victims, and activity...