Suncrypt
| RaaS
SunCrypt is a RaaS operation first observed in October 2019, notable for pioneering triple extortion (encryption, data publication threats, and DDoS attacks on non-paying victims), operating a closed small affiliate program and partnering with TrickBot for initial access.
Victims
32
First Victim
2020-08-24
(est. attack date)
Discovery Date
2020-08-24
Last Seen
2022-06-18
Inactive Since
4yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
N/A
victims with domain
Countries
1
hit
Uptime
0.0% avg (30d)
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
News | No | 2026-08-22T08:34:55 |
x2miyuiwpib2imjr5ykyjngdu7v6vprkkhjltrk4qafymtawey4qzwid.onion
|
||||
|
No | 2026-08-22T08:34:52 |
nbzzb6sa6xuura2z.onion
|
Target
Top 5 Activity Sectors
- Professional Services 5
- Retail & E-Commerce 5
- Manufacturing 4
- Healthcare 4
- Education 3
Top 5 Countries
-
United States
2
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (32)
