Apos
Apos is a data-broker extortion group that surfaced in April 2024, focusing on data exfiltration and threatening to publish or sell stolen information rather than encrypting files, targeting technology, healthcare, manufacturing, telecom, and government sectors across multiple countries.
Victims
16
First Discovered
2024-04-29
victim
Last Discovered
2025-08-15
victim
Inactive Since
276
days
Avg Delay
31.2
days
Infostealer
26.7%
victims with domain
Countries
9
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
SBU | No | 2026-04-28T07:21:17 |
yrz6bayqwhleymbeviter7ejccxm64sv2ppgqgderzgdhutozcbbhpqd.onion
|
Target
Top 5 Activity Sectors
- Business Services 3
- Healthcare 3
- Technology 3
- Consumer Services 2
- Manufacturing 2
Top 5 Countries
-
Brazil
4
-
United States
3
-
United Kingdom
1
-
Australia
1
Heatmap
YARA Rules (1)
Victims (16)
we exfiltrate all the data from server ,if ransom not paid we can publish all the data or sale to co…
we exfiltrate all the data Ha******.us from server SSN, FINANCIAL RECORD, MEDICAL RECORDS,PERSONAL D…
We have compromised your main server infraestructures.cat we also took copy of all the data. We giv…
Over the years, Lawton Partners has continued to grow and adapt to meet the ever-changing financial …
