Secp0 / Secpo
Encrypted Extension: .vanhelsing, .vanlocker. Targets Windows Platform only
Victims
6
First Victim
2025-03-14
(est. attack date)
Discovery Date
2025-03-14
Last Seen
2026-04-29
Inactive Since
125
days
Avg Delay
2
days
Infostealer
40.0%
victims with domain
Countries
2
hit
Uptime
47.7% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (4)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
SECP0 News | Yes | 2026-09-01T13:48:55 | nginx 1.24.0 |
secponewsxgrlnirowclps2kllzaotaf5w2bsvktdnz4qhjr2jnwvvyd.onion
|
|||
|
No | 2026-09-01T13:48:16 |
secp0-news.ws
|
|||||
|
No | 2026-08-22T07:59:58 |
secp0-leaks.com
|
|||||
|
Error Response Page | No | 2026-08-22T07:59:54 |
secp0-support.cfd
|
Target
Top 5 Activity Sectors
- Professional Services 3
- Technology 2
- Manufacturing 1
Top 5 Countries
-
United States
4
-
Canada
2
Heatmap
YARA Rules (1)
Victims (6)
The exposed dataset includes over 200,000 unique files containing sensitive information on more than…
The exposed dataset includes over 100,000 unique files (192,993 with duplicates) containing sensitiv…
The exposed dataset includes over 897,000 unique files (1,707,433 with duplicates) containing sensit…
The total volume of extracted data amounts to approximately 1.09TB (522,925 files total), with a fil…
The total volume of extracted data amounts to approximately 489 GB (459,391 files total). The files …
Due to Terralogic's unwillingness to cooperate, we are publishing evidence of the breach of their ne…