Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Whitearmor

New Group | Active

This is an emerging group, so claims should be treated with caution until independently verified.
None

Victims
3
 
First Victim
2026-10-21
(est. attack date)
Discovery Date
2026-10-23
 
Last Seen
2026-10-23
 
Inactive Since
0
days
Avg Delay
2
days
Infostealer
0.0%
victims with domain
Countries
1
hit
Uptime
97.1% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)
3 victims this month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN Status
favicon WhiteArmor Yes 2026-10-23T17:54:50 whitearz6uvtfdefgsc4r3mzmyswtte65k5umcmv6cu6zhi4l5k4irad.onion

Target
Top 5 Activity Sectors
  • Technology 1
  • Manufacturing 1
  • Transportation 1
Top 5 Countries
  • US flag United States 2

Heatmap

Indicators of Compromise (IoCs) (2)
Email 1 Session 1
Type IOC
Email whitearmorrxd@proton.me
Session 05e7d90e446b823946dc3dfd8210ce14835cad13b28edadc798b51c186a29f5f7b

Victims (3)
Logo
Discovered: 2026-10-23 (17m ago)
Hi! We now have a clearnet domain for easy-access. WhiteArmor.cc…
Logo
Discovered: 2026-10-23 (1h ago)  ·  Attack est.: 2026-10-21
Whirlpool is a global home appliance manufacturer (NYSE: WHR) making washers, fridges, and cooking a…
Logo
Discovered: 2026-10-23 (1h ago)
J.B. Hunt is a major North American transportation and logistics company providing intermodal, dedic…