Ransomware Group:  
Cloak



Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


Sites | Negotiations | Ransom Note(s) | Activity | Worldmap | Victims (128)


Sites

Favicon Title Type Available Last Visit FQDN Screenshot
403 Forbidden 🟢 2025-02-21 17:01:12.366108 cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion 📸

 Negotiation chats

Name # Msg Initial Ransom Negotiated Ransom Paid
20230802-2 66 N/A N/A
20230802 54 N/A N/A

This information is provided by Valéry Marchive & Julien Mousqueton

Ransom Note(s)

Activity over time

Worldmap

128 Victims

US flag

Waggonereng.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 16:23

Sector: Not Found
[AI generated] Waggoner Engineering, founded in 1976, is a professional services firm with a focus on engineering, geospatial and consulting services. Their team of multidisciplinary professionals serve clients within sectors like government agencies, industrial organizations, and private sector clients. The key industries they work in include energy, environment, infrastructure, and technology. Their headquarters are in Jackson, Mississippi.

Victim:   |  Group: 
 flag

op*********.eu 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 16:23

Sector: Not Found

Group: 
DE flag

wr********.de 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 16:23

Sector: Not Found

Group: 
DE flag

pen********.de 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 16:23

Sector: Not Found

Group: 
US flag

oa*************.us 

Company logo
Ransomware Group:

Discovery Date: 2025-02-20 16:23

Sector: Not Found

Group: 
CA flag

Ad***********.ca 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 15:19

Sector: Not Found

Group: 
 flag

Centromedicoenova 

Company logo
Ransomware Group:

Discovery Date: 2025-01-30 19:01

Sector: Healthcare
Country: Spain Views: 69 View more /enova Public <100GB

Victim:   |  Group: 
 flag

Premierautocredit.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-29 19:28

Country: USA Views: 53 View more /pac Public 156GB

Victim:   |  Group: 
DE flag

Kaisersbach.de 

Company logo
Ransomware Group:

Discovery Date: 2025-01-28 15:17

Sector: Not Found
Country: germany Views: 106 View more /kaiser Public <100GB

Victim:   |  Group: 
DE flag

Neovita.de 

Company logo
Ransomware Group:

Discovery Date: 2025-01-28 15:16

Sector: Healthcare
Country: germany Views: 88 View more /neovita Public 227GB

Victim:   |  Group: 
AT flag

Bwfg.at 

Company logo
Ransomware Group:

Discovery Date: 2025-01-23 18:39

Bwfg.at Country: austria Views: 16 View more /bwfg Public 102GB

Victim:   |  Group: 
 flag

pre*************.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-21 16:28

Sector: Not Found
Country: USA Views: 0 View more /hidden_113 Private 156GB

Group: 
 flag

Wa**********.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-21 16:28

Sector: Not Found
Country: USA Views: 0 View more /hidden_114 Private

Group: 
 flag

ge*******.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-21 16:28

Sector: Not Found
Country: Italy Views: 0 View more /hidden_115 Private 271GB

Group: 
DE flag

Mai***********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-30 21:42

Sector:
Mai***********.de Country: germany Views: 1 View more /hidden_112 Private <100GB

Group: 
AU flag

bac***********.com.au 

Company logo
Ransomware Group:

Discovery Date: 2024-12-30 21:42

Sector:
bac***********.com.au Country: Australia Views: 2 View more /hidden_111 Private <100GB

Group: 
CA flag

Town of Ponoka 

Company logo
Ransomware Group:

Discovery Date: 2024-12-30 21:42

Sector: Government
Ponoka.ca Country: Canada Views: 52073 View more /ponoka Public 110GB

Victim:   |  Group: 
DE flag

Kai*************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-20 06:11

Sector:
Kai*************.de Country: germany Views: 0 View more /hidden_109 Private <100GB

Group: 
DE flag

Ne***********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-20 06:11

Sector:
Country: germany Views: 0 View more /hidden_110 Private 227GB

Group: 
PE flag

Fmp.gob.pe 

Company logo
Ransomware Group:

Discovery Date: 2024-12-20 06:11

Sector: Government
[AI generated] Fmp.gob.pe refers to the Fondo MIVIVIENDA, a Peruvian government initiative aimed at facilitating access to affordable housing. It provides financial products and services to support homeownership, particularly for low- and middle-income families. The organization focuses on promoting sustainable urban development and improving living conditions through accessible mortgage loans and housing programs.

Victim:   |  Group: 
DE flag

Ukh-hof.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-10 22:28

Sector: Healthcare
Ukh-hof.de Country: Germany Views: 56 View more /ukh Public <100GB

Victim:   |  Group: 
DE flag

Orthopaedie-hof.de 

Company logo
Ransomware Group:

Discovery Date: 2024-12-10 22:28

Sector: Healthcare
Orthopaedie-hof.de Country: Germany Views: 51 View more /ortho Public <100GB

Victim:   |  Group: 
GB flag

N************.uk 

Company logo
Ransomware Group:

Discovery Date: 2024-12-10 22:28

Sector: Not Found
N************.uk Country: United Kingdom Views: 0 View more /hidden_108 Private 125GB

Victim:   |  Group: 
US flag

Donnewalddistributing 

Company logo
Ransomware Group:

Discovery Date: 2024-12-05 09:14
Estimated Attack Date: 2024-12-04

Country: USA Views: 61 View more /donne Public <100GB

Victim:   |  Group: 
 flag

o******************v 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-06

Sector: Not Found

Group: 
 flag

Glo**************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-06

Sector: Not Found

Group: 
FR flag

SCAFF'HOLDING 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-06

Sector: Financial

Group: 
US flag

Globalresultspr.com 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-19

Globalresultspr.com Country: USA Public 123GB

Victim:   |  Group: 
US flag

don****************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-16

Sector: Not Found
don****************.com Country: USA Private <100GB

Group: 
PE flag

F************.pe 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-16

Sector: Not Found
F************.pe Country: Peru Private 221GB

Group: 
DE flag

Uk***********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Germany Views: 0 Private <100GB

Group: 
DE flag

Or*************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Germany Views: 0 Private <100GB

Group: 
DE flag

Ma************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Germany Views: 0 Private 134GB

Group: 
AT flag

Bw**********.at 

Company logo
Ransomware Group:

Discovery Date: 2024-11-30 19:41
Estimated Attack Date: 2024-11-28

Sector: Not Found
Country: Austria Views: 0 Private 122GB

Group: 
IE flag

mm********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-10-22 19:51

Sector: Not Found
Country: Ireland

Group: 
US flag

Ful************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-09-26 18:56

Country: USA

Group: 
IT flag

Te***************.net 

Company logo
Ransomware Group:

Discovery Date: 2024-09-26 18:56

Sector: Not Found
Country: italy

Group: 
US flag

Pennvet.com 

Company logo
Ransomware Group:

Discovery Date: 2024-09-25 13:26

Sector: Healthcare
Country: USA

Victim:   |  Group: 
DE flag

Wertachkliniken.de 

Company logo
Ransomware Group:

Discovery Date: 2024-09-19 20:03

Sector: Healthcare
Country: germany

Victim:   |  Group: 
US flag

Pen*****************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-09-03 20:02

Country: USA

Group: 
US flag

El**********.hu 

Company logo
Ransomware Group:

Discovery Date: 2024-09-03 20:02

Country: USA

Group: 
DE flag

we****************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-09-03 20:02

Country: germany

Group: 
US flag

Stjamesplace.org 

Company logo
Ransomware Group:

Discovery Date: 2024-08-23 06:53

Sector: Financial
Country: USA

Victim:   |  Group: 
GB flag

Dunlop Aircraft Tyres 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:46

Country: United Kingdom

Victim:   |  Group: 
DK flag

Vibo.dk 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:46

Country: Denmark

Victim:   |  Group: 
DE flag

Hvb-ingenieure.de 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:44

Country: germany

Victim:   |  Group: 
GB flag

Westermans.com 

Company logo
Ransomware Group:

Discovery Date: 2024-08-21 17:42

Country: United Kingdom

Victim:   |  Group: 
FR flag

Entr**************.fr 

Company logo
Ransomware Group:

Discovery Date: 2024-08-14 16:29

Sector: Not Found
Country: France

Group: 
CY flag

Cb**********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-08-14 16:29

Sector: Technology
Country: Cyprus

Group: 
US flag

St**************.org 

Company logo
Ransomware Group:

Discovery Date: 2024-08-05 17:47

Sector: Not Found
Country: USA

Group: 
GB flag

Dd*******uk 

Company logo
Ransomware Group:

Discovery Date: 2024-08-01 08:05

Country: United Kingdom

Group: 
US flag

Kalaswire.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-27 08:40

Country: USA

Victim:   |  Group: 
DE flag

Hv*************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-07-22 08:50

Country: germany

Group: 
GB flag

We*******.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-22 08:50

Sector: Technology
Country: United Kingdom

Group: 
US flag

Ka******.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-22 08:50

Sector: Technology
Country: USA

Group: 
US flag

upcli.com 

Company logo
Ransomware Group:

Discovery Date: 2024-07-15 12:00

Sector: Technology
Country: USA

Group: 
DK flag

Vi*********.dk 

Company logo
Ransomware Group:

Discovery Date: 2024-07-15 12:00

Country: Denmark

Group: 
US flag

Abileneisd.org 

Company logo
Ransomware Group:

Discovery Date: 2024-07-04 14:21

Sector: Government
Country: USA

Victim:   |  Group: 
GB flag

Dun*****************uk 

Company logo
Ransomware Group:

Discovery Date: 2024-07-04 14:21

Country: United Kingdom

Victim:   |  Group: 
PL flag

P********.pl 

Company logo
Ransomware Group:

Discovery Date: 2024-06-30 18:19

Country: Poland

Group: 
US flag

Unit*****************.com 

Company logo
Ransomware Group:

Discovery Date: 2024-06-30 18:19

Sector: Not Found
Country: USA

Group: 
US flag

Longviewbridge.com 

Company logo
Ransomware Group:

Discovery Date: 2024-06-27 09:00

Country: USA

Victim:   |  Group: 
DE flag

Ruland-viersen.de 

Company logo
Ransomware Group:

Discovery Date: 2024-06-27 09:00

Country: germany

Victim:   |  Group: 
ES flag

Mundocar.eu 

Company logo
Ransomware Group:

Discovery Date: 2024-06-14 07:01

Country: spain

Victim:   |  Group: 
US flag

ab*******.org 

Company logo
Ransomware Group:

Discovery Date: 2024-06-14 07:01

Sector: Not Found
Country: USA

Group: 
US flag

lo***********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-06-07 08:37

Sector: Not Found
Country: USA

Group: 
DE flag

Rul**********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-05-21 06:04

Country: germany

Group: 
DE flag

Baeckerei-raddatz.de 

Company logo
Ransomware Group:

Discovery Date: 2024-05-16 14:15

Country: germany

Victim:   |  Group: 
CO flag

cli*********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-05-04 08:47

Sector: Not Found
Country: Colombia

Group: 
DE flag

bae************.de 

Company logo
Ransomware Group:

Discovery Date: 2024-05-04 08:47

Sector: Not Found
Country: germany

Group: 
HU flag

B*****.hu 

Company logo
Ransomware Group:

Discovery Date: 2024-04-29 07:06

Country: Hungary

Victim:   |  Group: 
CH flag

Ce***.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-27 10:30

Sector: Technology
Country: Switzerland

Victim:   |  Group: 
US flag

Sev********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-14 16:28

Sector: Not Found
Country: USA

Victim:   |  Group: 
US flag

Wencor.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-11 20:23

Country: USA

Victim:   |  Group: 
US flag

Theharriscenter.org 

Company logo
Ransomware Group:

Discovery Date: 2024-04-11 20:23

Sector: Healthcare
Country: USA

Victim:   |  Group: 
DE flag

Speditionweise.de 

Company logo
Ransomware Group:

Discovery Date: 2024-04-08 08:34

Country: germany

Victim:   |  Group: 
ES flag

Mu*****.eu 

Company logo
Ransomware Group:

Discovery Date: 2024-04-08 08:34

Sector: Technology
Country: spain

Group: 
GB flag

Cv*****.com 

Company logo
Ransomware Group:

Discovery Date: 2024-04-08 08:34

Sector: Technology
Country: United Kingdom

Victim:   |  Group: 
DE flag

Vhs-vaterstetten.de 

Company logo
Ransomware Group:

Discovery Date: 2024-03-24 13:52

Sector: Not Found
Country: germany

Victim:   |  Group: 
DE flag

Gascontec.com 

Company logo
Ransomware Group:

Discovery Date: 2024-03-24 13:52

Country: germany

Victim:   |  Group: 
BR flag

Equatorial Energia 

Company logo
Ransomware Group:

Discovery Date: 2024-03-24 13:52

Sector: Energy
Country: Brasil

Victim:   |  Group: 
 flag

****************** 

Company logo
Ransomware Group:

Discovery Date: 2024-03-18 21:03

Sector: Not Found
Country: ********

Group: 
CA flag

Hu********.ca 

Company logo
Ransomware Group:

Discovery Date: 2024-03-12 13:31

Country: Canada

Group: 
CA flag

Ponoka.ca 

Company logo
Ransomware Group:

Discovery Date: 2024-03-03 08:43

Sector: Government
Country: Canada

Victim:   |  Group: 
CA flag

Po****.ca 

Company logo
Ransomware Group:

Discovery Date: 2024-02-23 15:25

Country: Canada

Group: 
US flag

we****.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-20 23:21

Sector: Not Found
Country: USA

Group: 
US flag

The************.org 

Company logo
Ransomware Group:

Discovery Date: 2024-02-20 23:20

Sector: Not Found
Country: USA

Group: 
DE flag

Sped**********.de 

Company logo
Ransomware Group:

Discovery Date: 2024-02-20 23:20

Country: germany

Group: 
US flag

Forgepresion.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-12 18:54

Country: USA

Victim:   |  Group: 
US flag

bv*********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-12 18:54

Sector: Not Found
Country: USA

Victim:   |  Group: 
DE flag

ga*******.com 

Company logo
Ransomware Group:

Discovery Date: 2024-02-12 18:54

Sector: Not Found
Country: germany

Group: 
DE flag

vh********en.de 

Company logo
Ransomware Group:

Discovery Date: 2024-02-01 23:09

Country: germany

Group: 
US flag

For**********.com 

Company logo
Ransomware Group:

Discovery Date: 2024-01-24 16:12

Sector: Technology
Country: USA

Group: 
US flag

Maas911.com 

Company logo
Ransomware Group:

Discovery Date: 2024-01-06 13:52

Sector: Technology
Country: USA

Victim:   |  Group: 
US flag

M********org 

Company logo
Ransomware Group:

Discovery Date: 2023-12-27 12:50

Sector:
Country: USA

Group: 
US flag

Ma******.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-27 12:50

Sector:
Country: USA

Group: 
US flag

Gaido-fintzen.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-13 23:25
Estimated Attack Date: 2023-12-08

Sector:
Country: USA

Victim:   |  Group: 
US flag

Ga***********.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-08 13:30

Sector:
Country: USA

Group: 
DE flag

farwickgrote.de 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: germany

Victim:   |  Group: 
KN flag

skncustoms.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: Saint Kitts and Nevis

Victim:   |  Group: 
IT flag

euro2000-spa.it 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: Italy

Victim:   |  Group: 
US flag

Thenewtrongroup.com 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: USA

Victim:   |  Group: 
GB flag

Bankofceylon.co.uk 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: United Kingdom

Victim:   |  Group: 
CA flag

carranza.on.ca 

Company logo
Ransomware Group:

Discovery Date: 2023-12-01 13:20

Sector:
Country: Canada

Victim:   |  Group: 
DE flag

Arus-gmbh 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Group: 
 flag

Sportlab-srl 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: italia

Group: 
DE flag

BONI-PASSAU.DE 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Victim:   |  Group: 
FR flag

lusis-avocats.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: france

Victim:   |  Group: 
DE flag

werk33.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Victim:   |  Group: 
 flag

GRIDINSTALLERS.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: holland

Victim:   |  Group: 
TH flag

surapon.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: Thailand

Victim:   |  Group: 
DE flag

mps-24.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: germany

Victim:   |  Group: 
 flag

gruppomoba.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: italia

Victim:   |  Group: 
TW flag

stshcpa.com.tw 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: taiwan

Victim:   |  Group: 
MX flag

ihopmexico.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: Mexico

Victim:   |  Group: 
TW flag

Nicer technology 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: taiwan

Group: 
AE flag

binhamoodah.ae 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:42

Sector:
Country: Saud Arabia

Victim:   |  Group: 
ID flag

first-resources-ltd 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
country: Indonesia

Victim:   |  Group: 
DE flag

Sbs-Berlin 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: germany

Victim:   |  Group: 
US flag

imtmro.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: USA

Victim:   |  Group: 
CA flag

INCOBEC 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: Canada

Group: 
IT flag

still95.it 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: italia

Victim:   |  Group: 
 flag

gsh-cargo.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: UAE

Victim:   |  Group: 
GB flag

flamewarestudios.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: United Kingdom

Victim:   |  Group: 
BH flag

ALEZZELPOWER.com 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: Bahrain

Victim:   |  Group: 
FR flag

Notaires.fr 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:41

Sector:
Country: France

Victim:   |  Group: 
BF flag

Sonabhy.bf 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:40

Sector:
Country: Burkina Faso

Victim:   |  Group: 
US flag

KVFCU.ORG 

Company logo
Ransomware Group:

Discovery Date: 2023-08-24 07:39

Sector:
Country: USA

Victim:   |  Group: