Fulcrumsec
FulcrumSec is a data extortion group active since approximately September 2025, specializing in high-speed exfiltration of cloud-hosted databases by exploiting unrotated API keys and misconfigured cloud permissions rather than deploying encryption, with known victims including Australian fintech youX and LexisNexis.
Victims
25
First Victim
2026-05-01
(est. attack date)
Discovery Date
2026-05-01
Last Seen
2026-06-16
Inactive Since
75
days
Avg Delay
N/A
attack→claim
Infostealer
66.7%
victims with domain
Countries
11
hit
Uptime
48.7% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (4)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Index of /Shame | No | 2026-08-28T15:03:06 |
fulcrumsec.net/shame
|
||||
|
Index of /Shame | Yes | 2026-08-30T12:06:01 | nginx 1.20.1 |
4e3p3in2bl67hxchuwza7qvnpe7pyeloyztr5fnh257fxkovfhappjyd.onion/shame
|
|||
|
FulcrumSec | Yes | 2026-08-30T12:06:38 | nginx 1.20.1 |
4e3p3in2bl67hxchuwza7qvnpe7pyeloyztr5fnh257fxkovfhappjyd.onion
|
|||
|
FulcrumSec | No | 2026-08-28T15:03:01 |
fulcrumsec.net
|
Target
Top 5 Activity Sectors
- Technology 7
- Professional Services 6
- Healthcare 3
- Retail & E-Commerce 3
- Financial Services 2
Top 5 Countries
-
United States
13
-
United Kingdom
2
-
India
2
-
Denmark
1
-
Singapore
1
Heatmap
YARA Rules (1)
Indicators of Compromise (IoCs) (2)
Session
1
Tox
1
| Type | IOC |
|---|---|
Session
|
05dc2052b7a29d8661f30cbf0ae4f2093e8c85324a16867df5dd5c24f0364d8b27
|
Tox
|
969F8BE40B09537CD2A5038B9DA4BADE71C5F35DD666CC0D7632A6812D7AF72626D422D22540
|
Victims (25)
[AI generated] Novo Nordisk is a Danish multinational pharmaceutical company headquartered in Bagsvæ…
[AI generated] Global Schools Foundation is a Singapore-based non-profit organization operating in t…
[AI generated] Arup Group is a British multinational professional services firm headquartered in Lon…
[AI generated] Stuf Storage is a US-based company operating in the self-storage industry. It offers …
[AI generated] Avnet is a global electronic components distributor and technology solutions provider…
[AI generated] Woundtech is a US-based healthcare company specializing in advanced wound care manage…
[AI generated] youX, formerly known as Drive IQ, is an Australian technology company specializing in…
[AI generated] LexisNexis is a global information and analytics company headquartered in the United …
[AI generated] N/A
The acronym "MCO" is too ambiguous to identify a specific company with confidenc…
[AI generated] Hatica is an engineering analytics platform founded in India that helps software deve…
[AI generated] ParkEngage is a US-based technology company specializing in smart parking solutions. …
[AI generated] Interzero is a European environmental services company headquartered in Germany. It s…
[AI generated] Raptor Supplies is an online industrial and commercial supplies distributor operating…
[AI generated] Rotary Club, formally known as Rotary International, is a global humanitarian service…
[AI generated] BookBlock is a UK-based premium printing and bookbinding company specializing in high…
[AI generated] Fashinza is an AI-driven B2B fashion supply chain platform founded in India. It conne…