Groove
Groove emerged in mid-2021 as a loose criminal collective linked to former Babuk gang members, known for publicly leaking Fortinet VPN credentials to attract affiliates and calling for attacks on US government and financial targets; the group later claimed its entire operation was a hoax to mislead security researchers.
Victims
13
First Victim
2021-09-09
(est. attack date)
Discovery Date
2021-09-09
Last Seen
2021-10-30
Inactive Since
4yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
33.3%
victims with domain
Countries
0
hit
Uptime
0.0% avg (30d)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Утечки | Groove | No | 2026-08-22T08:32:05 |
ws3dh6av66sjbxxkjpw5ao3wqzmtejnkzheswm4dz5rrwvular7xvkqd.onion
|
Target
Top 5 Activity Sectors
- Healthcare 2
- Technology 2
- Government & Defense 1
- Manufacturing 1
Top 5 Countries
Heatmap
YARA Rules (1)
Victims (13)
