Ransomware Group:  
Devman


Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


Sites | Activity | Worldmap | Victims (10)


Sites

Favicon Title Type Available Last Visit FQDN Screenshot
Devman's Place 🔴 2025-04-16 17:00:25.664318 qljmlmp4psnn3wqskkf3alqquatymo6hntficb4rhq5n76kuogcv7zyd.onion N/A

Activity over time

Worldmap

10 Victims

SG flag

FEELFOUR 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-13 20:58

Sector: Not Found
70k USD

Group: 
flag

Med institute 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-13 20:58

Sector: Healthcare
Price -Soon

Group: 
TH flag

Bangkok Electronics Co., Ltd 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-13 20:58

Sector: Technology
200k USD

Group: 
EG flag

Tawasol 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-13 20:58

Sector: Not Found
150k USD

Group: 
US flag

Texas Construction Firm 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-13 20:58

Sector: Construction
Amount TBD

Group: 
flag

Optimax Technology 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-13 20:58

Sector: Technology
590k USD

Victim:   |  Group: 
AE flag

Dubai Company 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-06 22:31

Sector: Not Found
Different Locker

Group: 
flag

Texas Construction Firm 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-06 22:31

Sector: Construction
Name disclosed soon

Group: 
TW flag

Optimax Technology 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-06 22:31

Sector: Technology
Pending

Group: 
FR flag

doumen.fr 

Company logo
Ransomware Group:
Devman

Discovery Date: 2025-04-06 22:31
Estimated Attack Date: 2025-03-22

Sector: Not Found
Still in negotiation

doumen.fr has been previously claimed by Qilin for an attack estimated on 2025-03-22.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-04-06

Victim:   |  Group: 

© 2025 Ransomware.live. All rights reserved.  |    Contact us  |    BlueSky  |    GitHub  |    LinkedIn

  Terms & Conditions

  Support Ransomware.live

Last Dataset update : 2025-04-16 17:07:22 UTC

Logos provided by Logo.dev