Crypto24
| Active | RaaS
Crypto24 is a double-extortion ransomware-as-a-service group that surfaced on the RAMP forum in mid-2024, targeting large organizations in financial services, healthcare, manufacturing, and technology across Asia, Europe, and North America, with notable victims including CMC Group, Vietnam's second-largest ICT conglomerate.
Victims
46
First Discovered
2025-04-08
victim
Last Discovered
2026-04-17
victim
Inactive Since
29
days
Avg Delay
64.7
days
Infostealer
41.3%
victims with domain
Countries
24
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
CRYPTO24 | Data Leak Site | Yes | 2026-05-16T11:46:33 | nginx 1.22.1 — Express |
j5o5y2feotmhvr7cbcp2j2ewayv5mn5zenl3joqwx67gtfchhezjznad.onion
|
Target
Top 5 Activity Sectors
- Technology 9
- Manufacturing 6
- Business Services 6
- Financial Services 6
- Healthcare 5
Top 5 Countries
-
United States
8
-
Singapore
3
-
Indonesia
3
-
Malaysia
3
-
Argentina
2
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (3)
Email
1
IP Address
1
session
1
Victims (46)
[AI generated] Qatar Biomedical Research Institute (QBRI) is a research institute based in Qatar, op…
[AI generated] "Katcon Global" is a prominent automotive supplier, specialized in the field of devel…
[AI generated] Industrias Guerra, S.A. is a prominent Spanish company known for the manufacturing of…
[AI generated] Estudio O'Farrell is a prestigious law firm based in Buenos Aires, Argentina. Known f…
[AI generated] Invaccs Software Technologies Pvt Ltd is a technology company, based in India, that s…
HIPAA personal information for over 100,000 people...…
[AI generated] Rowad Modern Engineering is an Egypt-based construction firm specializing in the impl…
[AI generated] Putnam Precision, Inc. is a prominent manufacturing firm based in the USA, specializi…
According to our guidelines, full data will be released once the timer expires.…
Yource Bulgaria & Greece is a customer experience and contact center services provider supporting ma…
[AI generated] Hollysys Asia Pacific is part of Hollysys Automation Technologies Ltd, a leading prov…
We have successfully extracted over 500GB of documents from your internal network, including interna…
We have successfully extracted over 300GB of documents from your internal network, including interna…
We have exfiltrated over 700GB of most sensitive highly sensitive customer PII, financial/accounting…
We have exfiltrated over 500GB of most sensitive and business-critical data from palmgold's internal…
We are in possession of highly confidential data belonging to CMS, one of the largest international …
We have exfiltrated over 600GB of your most sensitive corporate data, including financial, technical…
We have exfiltrated over 300GB of most sensitive and business-critical data from internal servers in…
We’ve successfully breached the internal network of TransCore’s Dubai office.Over 200 GB of internal…
It contains sensitive personal data, including medical records, official documents, and imaging file…
The entire InsureAZ database has been leaked — including real insurance documents and all related ma…
We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of tanchong …
We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of wtc - TOU…
We have secured 2TB of confidential data : NATO-linked armor specifications and ballistic protection…
[AI generated] Tien Tuan Pharmaceutical Machinery Co. Ltd is a leading provider of integrated softwa…
[AI generated] Elite Advanced Laser Corporation, or Elaser, is a company that specializes in the man…
2 TB data including Token Data, Database Data, Website Data, ... from MariaDB, MongoDB and RARS-DB e…
casino customer info, db, ERP data, casino system projects source code and so on.…
Legal advice, case-related documents, financial information, contracts, billing…
All source codes of technoforte's main project - Palms(including mobile version)…
Identity cards including front and back of about 3,000 people (image, pdf), HR reports, Pay document…
All files of google drives, google chatting data ,workmanager documents(for last 5years) ,sql dbs a…