Atomsilo
| RaaS
AtomSilo is a double-extortion ransomware group that emerged in September 2021, exploiting the Atlassian Confluence vulnerability (CVE-2021-26084) for initial access and demanding ransoms up to $1 million, attributed to the Chinese state-linked threat actor BRONZE STARLIGHT.
Victims
5
First Victim
2021-12-21
(est. attack date)
Discovery Date
2021-12-21
Last Seen
2026-02-24
Inactive Since
179
days
Avg Delay
N/A
attack→claim
Infostealer
0.0%
victims with domain
Countries
2
hit
Uptime
88.9% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (3)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
AtomSilo | No | 2026-08-22T08:45:06 |
mhdehvkomeabau7gsetnsrhkfign4jgnx3wajth5yb5h6kvzbd72wlqd.onion
|
||||
|
AtomSilo | No | 2026-08-22T08:45:17 |
l5cjga2ksw6rxumu5l4xxn3cmahhi2irkbwg3amx6ajroyfmfgpfllid.onion
|
||||
|
Leak List - Atomsilo | Yes | 2026-08-22T18:34:18 | nginx |
npmh5ahrgakbniuntyc7io4adm6ietbdbuejrfonowqtyqn24or556qd.onion
|
Target
Top 5 Activity Sectors
- Healthcare 2
- Financial Services 1
- Manufacturing 1
Top 5 Countries
-
Brazil
2
-
Japan
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (1)
Email
1
| Type | IOC |
|---|---|
Email
|
arvato@atomsilo.com
|
Victims (5)
[AI generated] A large bank in Asia refers to a financial institution that provides diversified serv…
[AI generated] Eisai Co., Ltd. is a Japanese multinational pharmaceutical company headquartered in T…
[AI generated] Cristália - Indústria Farmacêutica is a premier pharmaceutical company based in Brazi…