Ransomware Group:  
Cloak



Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


Sites | Negotiations | Ransom Note(s) | Activity | Worldmap | Victims (114)


Sites

Favicon Title Available Last Visit FQDN Screenshot
403 Forbidden 🟢 2025-01-18 03:01:16.584995 cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion 📸

 Negotiation chats

Name # Msg Initial Ransom Negotiated Ransom Paid
20230802 54 N/A N/A
20230802-2 66 N/A N/A

This information is provided by Valéry Marchive & Julien Mousqueton

Ransom Note(s)

Activity over time

Worldmap

114 Victims

DE flag

Mai***********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-30 21:42

Sector:
Mai***********.de Country: germany Views: 1 View more /hidden_112 Private <100GB

Group: 
AU flag

bac***********.com.au 

Company logo
Ransomware Group:

Discovery Date: 2024-12-30 21:42

Sector:
bac***********.com.au Country: Australia Views: 2 View more /hidden_111 Private <100GB

Group: 
CA flag

Town of Ponoka 

Company logo
Ransomware Group:

Discovery Date: 2024-12-30 21:42

Sector: Government
Ponoka.ca Country: Canada Views: 52073 View more /ponoka Public 110GB

Victim:   |  Group: 
DE flag

Kai*************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-20 06:11

Sector:
Kai*************.de Country: germany Views: 0 View more /hidden_109 Private <100GB

Group: 
DE flag

Ne***********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-20 06:11

Sector:
Country: germany Views: 0 View more /hidden_110 Private 227GB

Group: 
PE flag

Fmp.gob.pe 

Company logo
Ransomware Group:

Discovery Date: 2024-12-20 06:11

Sector: Government
[AI generated] Fmp.gob.pe refers to the Fondo MIVIVIENDA, a Peruvian government initiative aimed at facilitating access to affordable housing. It provides financial products and services to support homeownership, particularly for low- and middle-income families. The organization focuses on promoting sustainable urban development and improving living conditions through accessible mortgage loans and housing programs.

Victim:   |  Group: 
DE flag

Ukh-hof.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-10 22:28

Sector: Healthcare
Ukh-hof.de Country: Germany Views: 56 View more /ukh Public <100GB

Victim:   |  Group: 
DE flag

Orthopaedie-hof.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-10 22:28

Sector: Healthcare
Orthopaedie-hof.de Country: Germany Views: 51 View more /ortho Public <100GB

Victim:   |  Group: 
GB flag

N************.uk 

Company logo
Ransomware Group:

Discovery Date: 2024-12-10 22:28

Sector: Not Found
N************.uk Country: United Kingdom Views: 0 View more /hidden_108 Private 125GB

Victim:   |  Group: 
US flag

Donnewalddistributing 

Company logo
Ransomware Group:

Discovery Date: 2024-12-05 09:14
Estimated Attack Date: 2024-12-04

Country: USA Views: 61 View more /donne Public <100GB

Victim:   |  Group: 
 flag

o******************v 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-06

Sector: Not Found

Group: 
 flag

Glo**************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-06

Sector: Not Found

Group: 
FR flag

SCAFF'HOLDING 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-06

Sector: Financial

Group: 
US flag

Globalresultspr.com 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-19

Globalresultspr.com Country: USA Public 123GB

Victim:   |  Group: 
US flag

don****************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-16

Sector: Not Found
don****************.com Country: USA Private <100GB

Group: 
PE flag

F************.pe 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-16

Sector: Not Found
F************.pe Country: Peru Private 221GB

Group: 
DE flag

Uk***********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Germany Views: 0 Private <100GB

Group: 
DE flag

Or*************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Germany Views: 0 Private <100GB

Group: 
DE flag

Ma************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Germany Views: 0 Private 134GB

Group: 
AT flag

Bw**********.at 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Austria Views: 0 Private 122GB

Group: 
IE flag

mm********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-10-22 19:51

Sector: Not Found
Country: Ireland

Group: 
US flag

Ful************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-09-26 18:56

Country: USA

Group: 
IT flag

Te***************.net 

Company logo
Ransomware Group:

Discovery Date: 2024-09-26 18:56

Sector: Not Found
Country: italy

Group: 
US flag

Pennvet.com 

Company logo
Ransomware Group:

Discovery Date: 2024-09-25 13:26

Sector: Healthcare
Country: USA

Victim:   |  Group: 
DE flag

Wertachkliniken.de 

Company logo
Ransomware Group:

Discovery Date: 2024-09-19 20:03

Sector: Healthcare
Country: germany

Victim:   |  Group: 
US flag

Pen*****************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-09-03 20:02

Country: USA

Group: 
US flag

El**********.hu 

Company logo
Ransomware Group:

Discovery Date: 2024-09-03 20:02

Country: USA

Group: 
DE flag

we****************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-09-03 20:02

Country: germany

Group: 
US flag

Stjamesplace.org 

Company logo
Ransomware Group:

Discovery Date: 2024-08-23 06:53

Sector: Financial
Country: USA

Victim:   |  Group: 
GB flag

Dunlop Aircraft Tyres 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:46

Country: United Kingdom

Victim:   |  Group: 
DK flag

Vibo.dk 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:46

Country: Denmark

Victim:   |  Group: 
DE flag

Hvb-ingenieure.de 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:44

Country: germany

Victim:   |  Group: 
GB flag

Westermans.com 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:42

Country: United Kingdom

Victim:   |  Group: 
FR flag

Entr**************.fr 

Company logo
Ransomware Group:

Discovery Date: 2024-08-14 16:29

Sector: Not Found
Country: France

Group: 
CY flag

Cb**********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-08-14 16:29

Sector: Technology
Country: Cyprus

Group: 
US flag

St**************.org 

Company logo
Ransomware Group:

Discovery Date: 2024-08-05 17:47

Sector: Not Found
Country: USA

Group: 
GB flag

Dd*******uk 

Company logo
Ransomware Group:

Discovery Date: 2024-08-01 08:05

Country: United Kingdom

Group: 
US flag

Kalaswire.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-27 08:40

Country: USA

Victim:   |  Group: 
DE flag

Hv*************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-07-22 08:50

Country: germany

Group: 
GB flag

We*******.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-22 08:50

Sector: Technology
Country: United Kingdom

Group: 
US flag

Ka******.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-22 08:50

Sector: Technology
Country: USA

Group: 
US flag

upcli.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-15 12:00

Sector: Technology
Country: USA

Group: 
DK flag

Vi*********.dk 

Company logo
Ransomware Group:

Discovery Date: 2024-07-15 12:00

Country: Denmark

Group: 
US flag

Abileneisd.org 

Company logo
Ransomware Group:

Discovery Date: 2024-07-04 14:21

Sector: Government
Country: USA

Victim:   |  Group: 
GB flag

Dun*****************uk 

Company logo
Ransomware Group:

Discovery Date: 2024-07-04 14:21

Country: United Kingdom

Victim:   |  Group: 
PL flag

P********.pl 

Company logo
Ransomware Group:

Discovery Date: 2024-06-30 18:19

Country: Poland

Group: 
US flag

Unit*****************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-06-30 18:19

Sector: Not Found
Country: USA

Group: 
US flag

Longviewbridge.com 

Company logo
Ransomware Group:

Discovery Date: 2024-06-27 09:00

Country: USA

Victim:   |  Group: 
DE flag

Ruland-viersen.de 

Company logo
Ransomware Group:

Discovery Date: 2024-06-27 09:00

Country: germany

Victim:   |  Group: 
ES flag

Mundocar.eu 

Company logo
Ransomware Group:

Discovery Date: 2024-06-14 07:01

Country: spain

Victim:   |  Group: 
US flag

ab*******.org 

Company logo
Ransomware Group:

Discovery Date: 2024-06-14 07:01

Sector: Not Found
Country: USA

Group: 
US flag

lo***********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-06-07 08:37

Sector: Not Found
Country: USA

Group: 
DE flag

Rul**********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-05-21 06:04

Country: germany

Group: 
DE flag

Baeckerei-raddatz.de 

Company logo
Ransomware Group:

Discovery Date: 2024-05-16 14:15

Country: germany

Victim:   |  Group: 
CO flag

cli*********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-05-04 08:47

Sector: Not Found
Country: Colombia

Group: 
DE flag

bae************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-05-04 08:47

Sector: Not Found
Country: germany

Group: 
HU flag

B*****.hu 

Company logo
Ransomware Group:

Discovery Date: 2024-04-29 07:06

Country: Hungary

Victim:   |  Group: 
CH flag

Ce***.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-27 10:30

Sector: Technology
Country: Switzerland

Victim:   |  Group: 
US flag

Sev********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-14 16:28

Sector: Not Found
Country: USA

Victim:   |  Group: 
US flag

Wencor.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-11 20:23

Country: USA

Victim:   |  Group: 
US flag

Theharriscenter.org 

Company logo
Ransomware Group:

Discovery Date: 2024-04-11 20:23

Sector: Healthcare
Country: USA

Victim:   |  Group: 
DE flag

Speditionweise.de 

Company logo
Ransomware Group:

Discovery Date: 2024-04-08 08:34

Country: germany

Victim:   |  Group: 
ES flag

Mu*****.eu 

Company logo
Ransomware Group:

Discovery Date: 2024-04-08 08:34

Sector: Technology
Country: spain

Group: 
GB flag

Cv*****.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-08 08:34

Sector: Technology
Country: United Kingdom

Victim:   |  Group: 
DE flag

Vhs-vaterstetten.de 

Company logo
Ransomware Group:

Discovery Date: 2024-03-24 13:52

Sector: Not Found
Country: germany

Victim:   |  Group: 
DE flag

Gascontec.com 

Company logo
Ransomware Group:

Discovery Date: 2024-03-24 13:52

Country: germany

Victim:   |  Group: 
BR flag

Equatorial Energia 

Company logo
Ransomware Group:

Discovery Date: 2024-03-24 13:52

Sector: Energy
Country: Brasil

Victim:   |  Group: 
 flag

****************** 

Company logo
Ransomware Group:

Discovery Date: 2024-03-18 21:03

Sector: Not Found
Country: ********

Group: 
CA flag

Hu********.ca 

Company logo
Ransomware Group:

Discovery Date: 2024-03-12 13:31

Country: Canada

Group: 
CA flag

Ponoka.ca 

Company logo
Ransomware Group:

Discovery Date: 2024-03-03 08:43

Sector: Government
Country: Canada

Victim:   |  Group: 
CA flag

Po****.ca 

Company logo
Ransomware Group:

Discovery Date: 2024-02-23 15:25

Country: Canada

Group: 
US flag

we****.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-20 23:21

Sector: Not Found
Country: USA

Group: 
US flag

The************.org 

Company logo
Ransomware Group:

Discovery Date: 2024-02-20 23:20

Sector: Not Found
Country: USA

Group: 
DE flag

Sped**********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-02-20 23:20

Country: germany

Group: 
US flag

Forgepresion.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-12 18:54

Country: USA

Victim:   |  Group: 
US flag

bv*********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-12 18:54

Sector: Not Found
Country: USA

Victim:   |  Group: 
DE flag

ga*******.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-12 18:54

Sector: Not Found
Country: germany

Group: 
DE flag

vh********en.de 

Company logo
Ransomware Group:

Discovery Date: 2024-02-01 23:09

Country: germany

Group: 
US flag

For**********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-01-24 16:12

Sector: Technology
Country: USA

Group: 
US flag

Maas911.com 

Company logo
Ransomware Group:

Discovery Date: 2024-01-06 13:52

Sector: Technology
Country: USA

Victim:   |  Group: 
US flag

M********org 

Company logo
Ransomware Group:

Discovery Date: 2023-12-27 12:50

Sector:
Country: USA

Group: 
US flag

Ma******.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-27 12:50

Sector:
Country: USA

Group: 
US flag

Gaido-fintzen.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-13 23:25
Estimated Attack Date: 2023-12-08

Sector:
Country: USA

Victim:   |  Group: 
US flag

Ga***********.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-08 13:30

Sector:
Country: USA

Group: 
DE flag

farwickgrote.de 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: germany

Victim:   |  Group: 
KN flag

skncustoms.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: Saint Kitts and Nevis

Victim:   |  Group: 
IT flag

euro2000-spa.it 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: Italy

Victim:   |  Group: 
US flag

Thenewtrongroup.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: USA

Victim:   |  Group: 
GB flag

Bankofceylon.co.uk 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: United Kingdom

Victim:   |  Group: 
CA flag

carranza.on.ca 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: Canada

Victim:   |  Group: 
DE flag

Arus-gmbh 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Group: 
 flag

Sportlab-srl 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: italia

Group: 
DE flag

BONI-PASSAU.DE 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Victim:   |  Group: 
FR flag

lusis-avocats.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: france

Victim:   |  Group: 
DE flag

werk33.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Victim:   |  Group: 
 flag

GRIDINSTALLERS.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: holland

Victim:   |  Group: 
TH flag

surapon.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: Thailand

Victim:   |  Group: 
DE flag

mps-24.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Victim:   |  Group: 
 flag

gruppomoba.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: italia

Victim:   |  Group: 
TW flag

stshcpa.com.tw 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: taiwan

Victim:   |  Group: 
MX flag

ihopmexico.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: Mexico

Victim:   |  Group: 
TW flag

Nicer technology 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: taiwan

Group: 
AE flag

binhamoodah.ae 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: Saud Arabia

Victim:   |  Group: 
ID flag

first-resources-ltd 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
country: Indonesia

Victim:   |  Group: 
DE flag

Sbs-Berlin 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: germany

Victim:   |  Group: 
US flag

imtmro.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: USA

Victim:   |  Group: 
CA flag

INCOBEC 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: Canada

Group: 
IT flag

still95.it 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: italia

Victim:   |  Group: 
 flag

gsh-cargo.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: UAE

Victim:   |  Group: 
GB flag

flamewarestudios.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: United Kingdom

Victim:   |  Group: 
BH flag

ALEZZELPOWER.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: Bahrain

Victim:   |  Group: 
FR flag

Notaires.fr 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: France

Victim:   |  Group: 
BF flag

Sonabhy.bf 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:40

Sector:
Country: Burkina Faso

Victim:   |  Group: 
US flag

KVFCU.ORG 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:39

Sector:
Country: USA

Victim:   |  Group: