Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Due to abuse of the free use of Ransomware.live, we have updated our Terms & Conditions. Please review them before continuing to use the Data.
Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Exfilsquad

New Group | Active

This is an emerging group, so claims should be treated with caution until independently verified.
Only exfiltration

Victims
15
 
First Victim
2026-07-26
(est. attack date)
Discovery Date
2026-07-26
 
Last Seen
2026-07-26
 
Inactive Since
22
days
Avg Delay
N/A
attack→claim
Infostealer
92.9%
victims with domain
Countries
4
hit
Uptime
90.6% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon ExfilSquad Yes 2026-08-17T11:50:24 NGINX nginx exfil5gqmbxrg6yky5aeitkdj7kfwxxjh3wxzrtlewjqi2x67o634iyd.onion

Target
Top 5 Activity Sectors
  • Government & Defense 4
  • Technology 3
  • Manufacturing 2
  • Education 2
  • Financial Services 2
Top 5 Countries
  • US flag United States 10
  • GB flag United Kingdom 3
  • SE flag Sweden 1
  • NG flag Nigeria 1

Heatmap

Indicators of Compromise (IoCs) (3)
Email 1 tox 2
Type IOC
Email exfilsquad@onionmail.org
tox 8F4BCBC804C3DB35112D0FCC0E8E02F48BD1F041E8395658A8E9D3E3D2A98C221362B3C3C93F
tox B72EE0D7BC8C8036C9D7E4FF5EFDE4202666B7AAB51E3A56965F7A7495DE3911AE3F680664EF

Victims (15)
Logo
Discovered: 2026-07-26 (21d ago)
Revenue: $24B DATA SUMMARY: 2.6M~ records containing: customer and employee PII, account and contac…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: $12.7B DATA SUMMARY: 570K~ records containing: customer PII and addresses.…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: SEK 8B DATA SUMMARY: 842K~ records containing: significant PII, property ownership/interes…
Logo
Discovered: 2026-07-26 (22d ago)
DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipa…
Logo
Discovered: 2026-07-26 (22d ago)
DATA SUMMARY: 6M~ records containing: significant PII, resident contact details, service requests, c…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: $1B DATA SUMMARY: 430K~ records containing: customer and partner contact information, sign…
Logo
Discovered: 2026-07-26 (22d ago)
DATA SUMMARY: 440K~ records containing: applicant and student contact information, significant PII, …
Logo
Discovered: 2026-07-26 (22d ago)
[AI generated] District of Columbia Public Schools (DCPS) is a public school district serving Washin…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: ₦2.3T DATA SUMMARY: 90M~ records containing: extensive PII, banking relationships, account…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: $1.5B DATA SUMMARY: 2.4M~ records containing: significant PII, customer support cases, fli…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: $1.5B DATA SUMMARY: 2M~ records containing: significant PII, customer support history, ord…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing in…
Logo
Discovered: 2026-07-26 (22d ago)
Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact…
Logo
Discovered: 2026-07-26 (22d ago)
DATA SUMMARY: 135k law enforcement contact records with first/last name, email, police force area, e…
Logo
Discovered: 2026-07-26 (22d ago)
DATA SUMMARY: Help Portal (~600K records) – Parent and staff contact records containing full names, …