Ransomware.live: lv

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

LV ransomware group main message: "Here are companies which didn't meet consumer data protection obligations. They rejected to fix their mistakes, they rejected to protect this data in the case when they could and had to ptotect it. These companies prefered to sell their private information, their employees' and customers' personal data". Security researchers claim that the LV group is utilizing the REvil ransomware group malware. The LV group claim to have compromised the corporate network of Groupe Reorev.

Victims

63

First Victim

2021-11-22

(est. attack date)

Discovery Date

2021-11-22

Last Seen

2022-11-27

Inactive Since

3yrs

more than

Avg Delay

N/A

attack→claim

Infostealer

53.8%

victims with domain

Countries

7

hit

Uptime

0.0% avg (30d)

View Victims on World Map View Group Statistics

Known Locations (2)

Favicon	Title	Type	Available	Last Visit	Server Info	FQDN	Status
			No	2026-08-22T08:42:10		`rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion`
	Start-maximized.com		No	2026-08-22T08:42:00		`4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion`

Target

Heatmap

Ransom Notes (1)

YARA Rules (1)

Victims (63)