Karma
| RaaS
Karma is a ransomware group first observed in mid-2021, part of a lineage tracing back through Nefilim and FiveHands, operating double-extortion attacks against enterprises in healthcare, manufacturing, and technology; the group was managed by threat actor "farnetwork" who ran multiple RaaS programs across related strains.
Victims
7
First Discovered
2021-10-04
victim
Last Discovered
2021-10-04
victim
Inactive Since
4yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
N/A
victims with domain
Countries
0
hit
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Karma Leaks | No | 2026-04-28T07:24:20 |
3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion
|
Target
Top 5 Activity Sectors
- Technology 3
- Manufacturing 2
- Consumer Services 1
Top 5 Countries
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (3)
Email
3
| Type | IOC |
|---|---|
Email
|
kirklord1967@tutanota.com
|
Email
|
leonardred1989@protonmail.com
|
Email
|
mikedillov1986@onionmail.org
|
Victims (7)
No description available