Darkangels
Dark Angels is a highly selective ransomware group active since April 2022 that targets a small number of large enterprises — including Johnson Controls — exfiltrating up to 100 TB of data per victim, and secured the largest known single ransom payment of $75 million from a Fortune 50 company in early 2024.
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Home | No | 2026-04-28T07:23:30 |
wemo2ysyeq6km2nqhcrz63dkdhez3j25yw2nvn7xba2z4h7v7gyrfgid.onion
|
Ransom Notes (2)
YARA Rules (1)
Indicators of Compromise (IoCs) (4)
Email
2
session
1
tox
1
| Type | IOC |
|---|---|
Email
|
inform-hack@proton.me
|
Email
|
infrom-test@proton.me
|
session
|
056645f3ef148be3d6b782581cfd89100b8287d20cb13a9ad02f34982930d36346
|
tox
|
EB66AAB860C618A4998118BC352BED9C9537EB3D7AC9BE1FFE548F68D921BB51A14BB177D99A
|