First listed
Victim claimMedusa listed by rebornvc
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor Claimedrebornvc
RebornVC is a rebrand of RansomedVC re-emerging in July 2025 under new leadership, using data auctions, direct extortion, and double extortion techniques with ransom demands ranging from $10,000 to $1,000,000, with confirmed victims in the US and Brazil.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Last observed
Indicator2 indicators cataloged
Types: domain.
First listed
Victim claimunyleya.edu.br listed by rebornvc
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedFirst listed
Victim claimsnapav.com / resideo.com listed by rebornvc
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedIdentity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
rebornvcCanonical Name
Loading CVEs, techniques, indicators, malware, victims, and activity...