Emperador
| Active
None
Victims
39
First Victim
2026-08-10
(est. attack date)
Discovery Date
2026-08-12
Last Seen
2026-10-11
Inactive Since
1
day
Avg Delay
1.3
days
Infostealer
56.2%
victims with domain
Countries
18
hit
Uptime
88.5% avg (30d)
Data Exfiltrated
396.4 GB
reported across 35/39 victims
Attack Velocity — Last 12 months (based on attack estimated date if available)
-74% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
EMPERADOR | Yes | 2026-10-12T11:38:50 | nginx |
emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 9
- Transportation 6
- Government & Defense 6
- Technology 3
- Agriculture and Food Production 2
Top 5 Countries
-
Brazil
5
-
United States
3
-
Türkiye
2
-
Sweden
2
-
Italy
2
Heatmap
Vulnerabilities Exploited (5)
| Vendor | Product | CVE | Source |
|---|---|---|---|
| Check Point | Security Gateway (IKEv1 improper auth) | CVE-2026-50751 | — |
| Nx | Nx Console (embedded malicious code) | CVE-2026-48027 | — |
| Microsoft | Exchange (deserialization) | CVE-2023-21529 | — |
| ConnectWise | ScreenConnect (path traversal -> RCE) | CVE-2024-1708 | — |
| Microsoft | Windows (link following) | CVE-2025-60710 | — |
KQL Query (1)
- Correlates edge-access events with lateral movement Lateral Movement Sentinel
Victims (39)
Dear Spelman Logistics,
We are now in possession of 1.2M contact records (emails and phone numbers)…
Engaged in the sale of jewelry made of precious metals,
diamond jewelry and the manufacture of cust…
Panamanian logistics company operating
in the field of international cargo transportation.
Financia…
A Peruvian company from the printing industry.
Commercial printing, packaging, labels, boxes, books,…
A Turkish company engaged in the wholesale and
retail trade of construction and household fittings
…
GRANJA AVICOLA LA PONDEROSA
Venezuela
The corporate purpose is mainly the purchase,
sale, import, e…
I have yet to hear a response from SitePro Rentals regarding the data breach. I have heard rumors th…
Amazon Informática LTDA is a prominent Information Technology (IT) solutions integrator and managed …
SitePro Rentals is a Texas-based construction and industrial equipment rental company founded in 202…
Hi Electrolux, im getting kind of inpatient, therefore i might just leak something. If i hear nothin…
CSA Car Service Abschlepp- & Bergungsdienst GmbH
Genslerstraße 72, 13055 Berlin
Archived personal an…
Hello Electrolux & OnTrac,
Still no response from you. When we called your IT helpdesk posing as th…
MINISTÉRIO DA FAZENDA
SECRETARIA DA RECEITA FEDERAL DO BRASIL
The archives contain several thousand …
Alabama Woman's Health Care
Comprehensive Consultative Medicine, Wellbeing and Aesthetic Care Organi…
Studio Notarile Associato Salvatore Costantino E Anna Favarato, Follina
+39 [REDACTED] 971778
Piazz…
Electrolux Group is a Swedish multinational home-appliance manufacturer, producing refrigerators, wa…
network commitment, from government credentials to justice panels, such as access to the financial s…
Full Employee Information
Full Students Information
Full Guardians Information [Size: 102.0 MB | Sec…
is an Italian company engaged in premium cars. There are many customer documents and employee data […
Sevenoaks, S.R.O. is an enterprise based in Czech Republic.
Its main office is in Prague.
The comp…
Nexbex Solutions Private Limited is a technology consulting and software engineering firm incorporat…
Colombian Company.
Audit and Tax Audit with more than 5 years of experience
Calle 17 sur 44 - 159 Of…
important documents [Size: 1.7 GB | Sector: Other]…
The official website of the Judicial Branch of Jujuy, Argentina. It provides court information, digi…
The data contains really sensitive information from 4 PV projects looking for investment/financing o…
Yes, this data has been posted before by ME under a different alias, yes the individual that posted …
Capitol Mechanics , fresh databases, important docs [Size: 120.9 MB | Sector: Finance, Transportatio…
Recent databases, important documents [Size: 540.1 MB | Sector: Manufacturing]…
Vietnam Electricity (EVN), legally known as Tập đoàn Điện lực Việt Nam, is the largest power company…
We hold complete, unrestricted access to your internal infrastructure. All servers, databases, email…
Albania’s official national teacher training portal provides centralized professional development re…
The City Government of Baguio stands as one of the wealthiest and most prominent local governments i…