Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Emperador

New Group | Active

This is an emerging group, so claims should be treated with caution until independently verified.
None

Victims
3
 
First Victim
2026-08-10
(est. attack date)
Discovery Date
2026-08-12
 
Last Seen
2026-08-18
 
Inactive Since
2
days
Avg Delay
1.5
days
Infostealer
100.0%
victims with domain
Countries
3
hit
Uptime
87.6% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)
3 victims this month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon EMPERADOR No 2026-08-20T00:51:20 emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion

Target
Top 5 Activity Sectors
  • Government & Defense 2
  • Education 1
Top 5 Countries
  • BR flag Brazil 1
  • AL flag Albania 1
  • PH flag Philippines 1

Heatmap

Victims (3)
Logo
Discovered: 2026-08-18 (Yesterday)
We hold complete, unrestricted access to your internal infrastructure. All servers, databases, email…
Logo
Discovered: 2026-08-17 (2d ago)  ·  Attack est.: 2026-08-16
Albania’s official national teacher training portal provides centralized professional development re…
Logo
Discovered: 2026-08-12 (7d ago)  ·  Attack est.: 2026-08-10
The City Government of Baguio stands as one of the wealthiest and most prominent local governments i…