Aurora
| Active
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
Victims
20
First Discovered
2026-04-29
victim
Last Discovered
2026-06-23
victim
Inactive Since
1
day
Avg Delay
12
days
Infostealer
5.0%
victims with domain
Countries
9
hit
Attack Velocity — Last 12 months
+900% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Aur0ra Blog | Yes | 2026-06-24T06:38:25 | nginx |
u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 5
- Business Services 5
- Financial Services 2
- Transportation/Logistics 2
- Construction 1
Top 5 Countries
-
United States
6
-
Germany
3
-
Canada
3
-
Peru
1
-
Netherlands
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (20)
[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations a…
*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties…
[engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor he…
[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade syst…
[insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-hau…
*** — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ ente…
[certification, inspection] ALS Limited (ASX:ALQ) — a global testing, inspection, and certification …
[food] Allan Brothers, Inc. — a third-generation, family-owned tree-fruit operation headquartered in…
[dealership, trucks] *** — Western Canada's largest International Trucks dealership group (9 dealer …
[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE…
Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regio…
Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Caw…
[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company head…
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular di…
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia…
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years
The single largest data category: 75,855 passpo…
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used /…
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufa…
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquarte…
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services pr…