Onyx
Onyx is a ransomware group first observed in April 2022, based on the Chaos ransomware builder, that is notably destructive — files larger than 2MB are overwritten with random data rather than encrypted, making recovery impossible even after ransom payment — claiming approximately 13 victims across six countries.
Victims
28
First Victim
2022-04-29
(est. attack date)
Discovery Date
2022-04-29
Last Seen
2022-11-21
Inactive Since
3yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
28.6%
victims with domain
Countries
2
hit
Uptime
0.0% avg (30d)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
VSOP NEWS | No | 2026-08-22T08:35:12 |
mrdxtxy6vqeqbmb4rvbvueh2kukb3e3mhu3wdothqn7242gztxyzycid.onion
|
Target
Top 5 Activity Sectors
- Retail & E-Commerce 5
- Government & Defense 5
- Healthcare 4
- Manufacturing 3
- Agriculture and Food Production 2
Top 5 Countries
-
Mexico
1
-
Brazil
1
Heatmap
YARA Rules (1)
Victims (28)
