Byod
New Group | Active
This is an emerging group, so claims should be treated with caution until independently verified.
None
Victims
10
First Victim
2026-09-29
(est. attack date)
Discovery Date
2026-10-05
Last Seen
2026-10-27
Inactive Since
1
day
Avg Delay
3
days
Infostealer
100.0%
victims with domain
Countries
3
hit
Uptime
87.5% avg (30d)
Data Exfiltrated
922.0 GB
reported across 4/10 victims
Attack Velocity — Last 12 months (based on attack estimated date if available)
+300% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
BYOD | Yes | 2026-10-28T09:35:55 |
byodxn5s7sua6oyyjj74rycgn6afncfckprt5ezskt3cni6lg3wdrgad.onion
|
Target
Top 5 Activity Sectors
- Technology 3
- Education 2
- Retail & E-Commerce 1
- Financial Services 1
- Professional Services 1
Top 5 Countries
-
United States
3
-
Singapore
1
-
Malaysia
1
Heatmap
Indicators of Compromise (IoCs) (2)
Email
1
Session
1
| Type | IOC |
|---|---|
Email
|
byod@onionmail.org
|
Session
|
05b18abb1c28e6ae8b12e2910197dba5e756c11c3a4046be50e0d356a815bc5d37
|
Victims (10)
We are offering the decryption key for the remaining of locked devices for free (ONLY for the hospit…
36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patie…
Canaidan based home essentials, 60,544 customers, Home addresses + ZIP Code, longitude + latitude, P…
12 Million Users, Phone numbers, Nicknames, Balance/VIP Tier List, 2FA Indicator (differentiates, Pa…
Finished Financial Statements, Tenant documents & files, Customer Bank Accounts, Deposit Slips, Paym…
You know we have over 700GB of Data, AWS Keys to your buckets, (which we dumped), Moonshot AI API ke…
Trump mobile was informed they had been breached, they then replied with "We have no team to handle …
Both, your Registered Users & Customer list have been affected. 300K Lines Total, Includes: Names, E…