Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor Claimedlosttrust
LostTrust is a double-extortion ransomware operation that emerged in March 2023 and publicized over 50 victims within days of launching its leak site in September 2023, believed to be a rebrand of the MetaEncryptor gang, primarily targeting manufacturing, professional services, construction, and education sectors with 71% of known victims in the US.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedThe interactive view includes 54 dated events with category filters and paging.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
Loading CVEs, techniques, indicators, malware, victims, and activity...