Cheers
Cheers is a Linux-based ransomware group that emerged in 2022, built on leaked Babuk source code and specializing in attacks against VMware ESXi servers, running a double-extortion leak site with four documented victims.
Victims
15
First Victim
2022-05-29
(est. attack date)
Discovery Date
2022-05-29
Last Seen
2022-09-14
Inactive Since
3yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
N/A
victims with domain
Countries
0
hit
Uptime
0.0% avg (30d)
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Cheers! | No | 2026-08-22T08:55:26 |
rwiajgajdr4kzlnrj5zwebbukpcbrjhupjmk6gufxv6tg7myx34iocad.onion
|
||||
|
sembmarine | No | 2026-08-22T08:55:38 |
crkfkmrh4qzbddfrl2axnkvjp5tgwx73d7lq4oycsfxc7pfgbfhtfiid.onion
|
Target
Top 5 Activity Sectors
- Financial Services 6
- Transportation 4
- Hospitality 2
- Technology 1
- Healthcare 1
Top 5 Countries
Heatmap
YARA Rules (1)
Victims (15)
