Arkana
Arkana is a ransomware group that emerged in early 2025 and gained attention by claiming an attack on U.S. broadband provider WideOpenWest (WOW!), operating a three-phase ransom/sale/leak extortion model primarily focused on telecom and internet service providers.
Victims
6
First Discovered
2025-03-25
victim
Last Discovered
2025-06-06
victim
Inactive Since
347
days
Avg Delay
1.3
days
Infostealer
83.3%
victims with domain
Countries
2
hit
Attack Velocity — Last 12 months
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Arkana Security | No | 2026-04-28T07:21:48 |
ransomwvbabemdnwl7lzgeenyfmmhskaed6jcruwhkvapsia76vttzyd.onion
|
|||
|
Arkana Security | No | 2026-04-28T07:24:15 |
arkanabb66ee4nsdji6la2bu6bwqe3dbtsyf3rxrv6vhiehod7utagad.onion
|
Target
Top 5 Activity Sectors
- Consumer Services 1
- Technology 1
- Financial Services 1
- Energy 1
- Telecommunication 1
Top 5 Countries
-
United States
4
-
United Kingdom
2
Heatmap
YARA Rules (1)
Indicators of Compromise (IoCs) (1)
session
1
| Type | IOC |
|---|---|
session
|
05babe48a5070de46a39ee4aa025988beefe059dad57babe52ba797b85643f4523
|
Victims (6)
[AI generated] Ticketmaster Entertainment, Inc. is an American ticket sales and distribution company…
[AI generated] Anglo American plc is a multinational mining corporation based in Johannesburg, South…
[AI generated] "Oregon Surveillance Network - OSN!" is a company that specializes in providing cutti…
[AI generated] Wide Open West (WOW!) is the sixth largest cable operator in the United States. It pr…