Emperador
| Active
None
Victims
22
First Victim
2026-08-10
(est. attack date)
Discovery Date
2026-08-12
Last Seen
2026-09-19
Inactive Since
0
days
Avg Delay
1.3
days
Infostealer
75.0%
victims with domain
Countries
14
hit
Uptime
90.2% avg (30d)
Data Exfiltrated
344.6 GB
reported across 18/22 victims
Attack Velocity — Last 12 months (based on attack estimated date if available)
+20% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
EMPERADOR | Yes | 2026-09-19T20:41:47 | nginx |
emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion
|
Target
Top 5 Activity Sectors
- Government & Defense 5
- Manufacturing 4
- Education 2
- Transportation 2
- Energy & Utilities 2
Top 5 Countries
-
Brazil
3
-
India
2
-
Sweden
1
-
Italy
1
-
Czechia
1
Heatmap
Vulnerabilities Exploited (5)
| Vendor | Product | CVE | Source |
|---|---|---|---|
| Check Point | Security Gateway (IKEv1 improper auth) | CVE-2026-50751 | — |
| Nx | Nx Console (embedded malicious code) | CVE-2026-48027 | — |
| Microsoft | Exchange (deserialization) | CVE-2023-21529 | — |
| ConnectWise | ScreenConnect (path traversal -> RCE) | CVE-2024-1708 | — |
| Microsoft | Windows (link following) | CVE-2025-60710 | — |
KQL Query (1)
- Correlates edge-access events with lateral movement Lateral Movement Sentinel
Victims (22)
Electrolux Group is a Swedish multinational home-appliance manufacturer, producing refrigerators, wa…
network commitment, from government credentials to justice panels, such as access to the financial s…
Full Employee Information
Full Students Information
Full Guardians Information [Size: 102.0 MB | Sec…
is an Italian company engaged in premium cars. There are many customer documents and employee data […
Sevenoaks, S.R.O. is an enterprise based in Czech Republic.
Its main office is in Prague.
The comp…
Nexbex Solutions Private Limited is a technology consulting and software engineering firm incorporat…
Colombian Company.
Audit and Tax Audit with more than 5 years of experience
Calle 17 sur 44 - 159 Of…
important documents [Size: 1.7 GB | Sector: Other]…
The official website of the Judicial Branch of Jujuy, Argentina. It provides court information, digi…
The data contains really sensitive information from 4 PV projects looking for investment/financing o…
Yes, this data has been posted before by ME under a different alias, yes the individual that posted …
Capitol Mechanics , fresh databases, important docs [Size: 120.9 MB | Sector: Finance, Transportatio…
Recent databases, important documents [Size: 540.1 MB | Sector: Manufacturing]…
Vietnam Electricity (EVN), legally known as Tập đoàn Điện lực Việt Nam, is the largest power company…
We hold complete, unrestricted access to your internal infrastructure. All servers, databases, email…
Albania’s official national teacher training portal provides centralized professional development re…
The City Government of Baguio stands as one of the wealthiest and most prominent local governments i…