Search threats, CVEs… ⌘K
← Back to all threat actors

stormous

Stormous is an Arabic-speaking, pro-Russian ransomware and hacktivist group active since at least 2022, known for politically motivated attacks across 15+ countries, collaborating with GhostSec on the GhostLocker 2.0 RaaS platform and inheriting GhostSec's RaaS operations in mid-2024.
On 1st July 2026 the group has annonced the end of their operations & ervices

How we source and review actor profiles
Motivation
ransomware
First seen
2026-05-01
Last seen
2026-07-01
Sectors
technology, professional-services, manufacturing, hospitality, education, government-defense, healthcare, financial-services, other, transportation, retail-e-commerce, energy-utilities
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Claimed
Victim claimBN: higuchi-inc Report Error & Warning⁠ listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Last observed
Indicator4 indicators cataloged

Types: onion.

Claimed
Victim claimhiguchi-inc.co.jp listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimHIGUCHI USA, INC listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimeogb.co.uk listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimeshacloudqa.com listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimmonoprix.tn listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimOfficial Statement: Protecting palatineschool.org Infrastructure listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimmlit.com.my UPDATE-FULL DATA DUMP NEW LINK 10GB listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimjaggroup.com UPDATE-FULL DATA DUMP NEW LINK listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimmaglificioliliana.com listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimlorenzoni-store.com listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimmontechiaro-store.com listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimimpulso-store.com listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimjaggroup.com UPDATE-FULL DATA DUMP listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimmlit.com.my UPDATE-FULL DATA DUMP 10GB listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimmlit.com.my listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimkatholiekamersfoort.nl UPDATE-FOR SALE listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimsa2000.com UPDATE-FULL DATA DUMP listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimSA2000.COM listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimkatholiekamersfoort.nl listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimttt.vn UPDATE-FULL DATA DUMP listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimvspsolutions.com.au SAMPLE-FREE 20GB listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimFANASA.COM UPDATE-FULL DATA DUMP listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimarc-reins.com + fidelityunited.ae UPDATE-FULL DATA DUMP listed by stormous

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

The interactive view includes 101 dated events with category filters and paging.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

stormousCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...