Redalert
RedAlert (also called N13V) is a ransomware group first observed in July 2022 that targets both Windows and Linux VMware ESXi servers, encrypting virtual machine files using the NTRUEncrypt algorithm and accepting only Monero for payment, conducting double-extortion attacks against corporate networks.
Victims
6
First Discovered
2022-07-14
victim
Last Discovered
2022-09-22
victim
Inactive Since
3yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
N/A
victims with domain
Countries
2
hit
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Board of shame | No | 2026-04-28T07:26:08 |
blog2hkbm6gogpv2b3uytzi3bj5d5zmc4asbybumjkhuqhas355janyd.onion
|
|||
|
Login | No | 2026-04-28T07:28:40 |
je2yizds7r4uidk6uixfxwjj5w7or2agit4aj66l4lrhdbrvr3lsymid.onion
|
Target
Top 5 Activity Sectors
- Business Services 2
- Technology 1
Top 5 Countries
-
United Kingdom
1
-
France
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (6)
