Obsoft
New Group | Active
This is an emerging group, so claims should be treated with caution until independently verified.
None
Victims
6
First Victim
2026-10-12
(est. attack date)
Discovery Date
2026-11-03
Last Seen
2026-11-03
Inactive Since
0
days
Avg Delay
9.3
days
Infostealer
0.0%
victims with domain
Countries
1
hit
Uptime
100.0% avg (30d)
Data Exfiltrated
122.6 TB
reported across 6/6 victims
Attack Velocity — Last 12 months (based on attack estimated date if available)
-50% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
OBSOFT | Yes | 2026-11-03T07:45:08 | nginx — Express |
6hzpdc5pxt57jmjxyegwjyhcinr2z3ajucizndehykz7zfrtaptln5qd.onion
|
Target
Top 5 Activity Sectors
Top 5 Countries
-
Korea, Republic of
5
Heatmap
Indicators of Compromise (IoCs) (2)
Telegram
1
Tox
1
| Type | IOC |
|---|---|
Telegram
|
obsoft2048
|
Tox
|
546E7020A4555378F824BA528E4845CD549A31CC7EA148F10174921FACAFBB640B5F5934DF5D
|
Victims (6)
