Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Anubis

| Active | RaaS

Anubis is a ransomware-as-a-service group active since December 2024 that targets healthcare, engineering, construction, and professional services sectors, offering affiliates a flexible revenue split model and an optional destructive "wipe mode" alongside standard encryption.

Victims
77
 
First Discovered
2025-02-25
victim
Last Discovered
2026-05-13
victim
Inactive Since
2
days
Avg Delay
85
days
Infostealer
18.6%
victims with domain
Countries
17
hit
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months
-78% vs last month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon Anubis blog Yes 2026-05-15T17:46:33 NGINX nginx 1.18.0 om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion

Target
Top 5 Activity Sectors
  • Healthcare 17
  • Manufacturing 14
  • Business Services 12
  • Technology 8
  • Financial Services 6
Top 5 Countries
  • US flag United States 43
  • GB flag United Kingdom 6
  • AU flag Australia 6
  • CA flag Canada 4
  • FR flag France 3

Heatmap

YARA Rules (1)

Indicators of Compromise (IoCs) (30)
Hash MD5 25 IP Address 4 twitter 1
Type IOC
Hash MD5 054d432e231e8ee6e301675ef2bd598d
Hash MD5 0a5f3fc92af7aa3e448ac7b84e495fc6
Hash MD5 0f1b8aa83e5f9c40ad32561a95ed2c67
Hash MD5 1b701df9e6b5252feef3d1d8dcfe12f5
Hash MD5 241d01f08172a117268eb0f223348e47
Hash MD5 24eae2bb569d97018d343fff50112dab
Hash MD5 271998018494403a9b5d0d4b01eb0c44
Hash MD5 284d536dab5865150873e927a29cb0ae
Hash MD5 4f178cefbf3fc66baed13b3c4fa897d4
Hash MD5 5334cbddd1128f87308c0725d2cb012e
Hash MD5 71ce395e8bb531ec3623b94387de8392
Hash MD5 832feae0378a9b36c4958812735b6d81
Hash MD5 8a12e997e672b80319c5b852b237e5a9
Hash MD5 994a0c3e3e1390d972b1bdd8e8f2a449
Hash MD5 9ef845add689fc71cae33686139efbb0
Hash MD5 a1765503f1405b24b77a16071e6ea6f6
Hash MD5 a2d853247d939106231314bc5b233bda
Hash MD5 a4b88bf440613390cd32e045a59fd7b0
Hash MD5 c66022aa8b77a95c9b78a8743657f830
Hash MD5 d2410703e93be61a652b92efcf42789d
Hash MD5 d9a053e54be4003cc28b41fe30790349
Hash MD5 ed2510198b03435570d72ce274bc245c
Hash MD5 f1b5f6edfba8bf1312f65e7f2787c72f
Hash MD5 f71d8db7fda7659718330efcbd0776f0
Hash MD5 f8a242fa6a8df6eafded0a6987a5ac09
IP Address 195.133.67.35
IP Address 212.224.107.203
IP Address 38.134.148.20
IP Address 5.252.177.249
twitter @Anubis__media

Victims (77)
Logo
Discovered: 2026-05-13 (2d ago)
Accounting firm data breach.…
Logo
Discovered: 2026-05-01 (14d ago)
Clients’ medical data breach.…
Logo
Discovered: 2026-04-30 (14d ago)  ·  Attack est.: 2026-02-04
[Redacted]
Logo
Discovered: 2026-04-23 (22d ago)
A small but substantial data breach at a fintech company.…
Logo
Discovered: 2026-04-23 (22d ago)
Data breach at financial company.…
Logo
Discovered: 2026-04-21 (24d ago)
Significant breach at a law firm.…
Logo
Discovered: 2026-04-21 (24d ago)
Large-scale data breach at a care provider for seriously ill patients.…
Logo
Discovered: 2026-04-09 (1mo ago)
Will there be a release? Keep an eye on the timer.…
Logo
Discovered: 2026-04-07 (1mo ago)
Data breach at a small fuel company.…
Logo
Discovered: 2026-04-06 (1mo ago)
Careless IT contractor jeopardizes client security.…
Logo
Discovered: 2026-04-04 (1mo ago)
Aviation firm data breach.…
Logo
Discovered: 2026-04-01 (1mo ago)
The fall of a sweepstakes giant.…
Logo
Discovered: 2026-03-27 (1mo ago)
Data breach at a law firm representing clients ranging from government institutions to Fortune 500 c…
Logo
Discovered: 2026-03-27 (1mo ago)
Data breach at a major french IT company.…
Logo
Discovered: 2026-03-13 (2mo ago)
How a single data breach exposed contracts, credentials, and critical infrastructure details.…
Logo
Discovered: 2026-03-10 (2mo ago)
www.cpageorgia.com - accounting firm data breach. Small dataset, big consequences.…
Logo
Discovered: 2026-03-10 (2mo ago)
Data breach at electrical installation company: drawings, tenders, and other data on the healthcare …
Logo
Discovered: 2026-03-07 (2mo ago)
A major leak of smiles.…
Logo
Discovered: 2026-03-03 (2mo ago)
Injury accident law firm data breach: driver IDs and other personal data.…
Logo
Discovered: 2026-03-02 (2mo ago)
Data breach at leading global paints and coatings company.…
Logo
Discovered: 2026-02-26 (2mo ago)
Clinic data breach: another example of negligence in a medical institution.…
Logo
Discovered: 2026-02-26 (2mo ago)
Major data breach of Engineering firm with high-profile clients.…
Logo
Discovered: 2026-02-21 (2mo ago)
Data breach involving the cloud provider's clients.…
Logo
Discovered: 2026-02-18 (2mo ago)
Data breach at an Air Transportation Company.…
Logo
Discovered: 2026-02-13 (3mo ago)
Insider Information about Samsung and Other South Korean Tech Companies…
Logo
Discovered: 2026-02-09 (3mo ago)
Personal and Corporate data breach.…
Logo
Discovered: 2026-02-09 (3mo ago)
Data breach of real estate investment firm: financial and Personalp identification data exposed.…
Logo
Discovered: 2026-02-08 (3mo ago)
Patent lawyers' data breach; Drafts and intellectual property.…
Logo
Discovered: 2026-02-06 (3mo ago)
Data breach on aerospace developments.…
Logo
Discovered: 2026-02-04 (3mo ago)
[Redacted]…
Logo
Discovered: 2026-02-03 (3mo ago)
What problems does this law firm have besides its shitty logo? Find out in the article.…
Logo
Discovered: 2026-01-25 (3mo ago)
Personal and Corporate data breach.…
Logo
Discovered: 2026-01-25 (3mo ago)
Employee data breach.…
Logo
Discovered: 2026-01-14 (4mo ago)
Data Breach at One of Chile's Leading Companies…
Logo
Discovered: 2026-01-14 (4mo ago)
www.porto.ancona.it - data breach.…
Logo
Discovered: 2026-01-08 (4mo ago)
Data Breach at Gynecology Clinic.…
Logo
Discovered: 2025-12-23 (4mo ago)
Contracts, drawings, and client contacts.…
Logo
Discovered: 2025-12-23 (4mo ago)
Data breach at a clinic.…
Logo
Discovered: 2025-12-23 (4mo ago)
The biggest leak of boobies!…
Logo
Discovered: 2025-12-19 (4mo ago)
Data breach at a U.S. food safety and quality testing laboratory.…
Logo
Discovered: 2025-12-16 (5mo ago)
Personal data.…
Logo
Discovered: 2025-12-16 (5mo ago)
Data breach from Silicon Valley lawyers.…
Logo
Discovered: 2025-12-06 (5mo ago)
The Internal Story of a County in the State of Ohio.…
Logo
Discovered: 2025-12-05 (5mo ago)
Data breach at a Polish international transport and logistics company.…
Logo
Discovered: 2025-12-04 (5mo ago)
A company that provides comprehensive fire protection services for buildings.…
Logo
Discovered: 2025-12-01 (5mo ago)
Customer passports and personal data.…
Logo
Discovered: 2025-11-28 (5mo ago)
Patient data breach.…
Logo
Discovered: 2025-11-26 (5mo ago)
Major customer database leak.…
Logo
Discovered: 2025-11-19 (5mo ago)
Leakage of customer contact details.…
Logo
Discovered: 2025-11-13 (6mo ago)
Hawaii’s leading law firm data breach.…
Logo
Discovered: 2025-11-11 (6mo ago)
Negligence of mental health care agency employees…
Logo
Discovered: 2025-11-11 (6mo ago)
Data Breach at U.S. Medical Center Puts Thousands of Patients at Risk…
Logo
Discovered: 2025-11-06 (6mo ago)
Leak of clinic customer data.…
Logo
Discovered: 2025-11-03 (6mo ago)
Data breach at automotive industry leader.…
Logo
Discovered: 2025-11-02 (6mo ago)
Data breach at automotive industry leader.…
Logo
Discovered: 2025-10-23 (6mo ago)
Personal data, confidential documents, and more.…
Logo
Discovered: 2025-10-23 (6mo ago)
Law firm data breach…
Logo
Discovered: 2025-10-16 (7mo ago)
An Australian engineering leader has fallen victim to a cyberattack causing a data breach.…
Logo
Discovered: 2025-10-11 (7mo ago)
Financial data breach…
Logo
Discovered: 2025-10-10 (7mo ago)
Data leak at one of the world's leading logistics service providers…
Logo
Discovered: 2025-10-07 (7mo ago)
It seems they have decided to play silent.…
Logo
Discovered: 2025-10-01 (7mo ago)
Customer data leak…
Logo
Discovered: 2025-09-30 (7mo ago)
Major personal data leak…
Logo
Discovered: 2025-09-19 (7mo ago)
Photos and blueprints of government facilities.…
Logo
Discovered: 2025-09-02 (8mo ago)
Data breach at one of the largest cement and concrete producers in North America.…
Logo
Discovered: 2025-08-28 (8mo ago)
Data breach at an aerospace and defense contractor.…
Logo
Discovered: 2025-08-15 (9mo ago)
The 150 GB leak involves confidential documents and NDA agreements with companies such as Ford, Bent…
Logo
Discovered: 2025-08-13 (9mo ago)
Leakage of internal documents at a company engaged in the development and implementation of HPC syst…
Logo
Discovered: 2025-06-20 (10mo ago)
Confidential Disneyland documents.…
Logo
Discovered: 2025-06-10 (11mo ago)
Blueprints of L3Harris, General Atomics and Virgin Galactic.…
Logo
Discovered: 2025-04-23 (1y ago)
Leaked ultra-detailed blueprints of a casino that plans a grand opening in 2026.…
Logo
Discovered: 2025-04-01 (1y ago)
Blueprints of M1 Bank, Mastercard and so on.…
Logo
Discovered: 2025-03-23 (1y ago)
Breach of personal data of patients, company employees, and dozens of incidents, including Patient a…
Logo
Discovered: 2025-02-25 (1y ago)
AU Passports, DOB, Medical Records.…
Logo
Discovered: 2025-02-25 (1y ago)
7000+ US Fullinfo…
Logo
Discovered: 2025-02-25 (1y ago)
Detailed financial and privacy information.…
Logo
Discovered: 2025-02-25 (1y ago)
Leaked blueprints for casinos, airports and hundreds of other companies.…