Back to Threat Groups

benzona

INACTIVE

ransomware group

Benzona is a financially motivated ransomware group that emerged in late 2024, targeting small to mid-sized organization

Victims
13
records
First Discovered
Nov 26, 2025
victim
Last Discovered
Feb 22, 2026
victim
Inactive Since
175
days
Countries
8
hit
Avg Discount
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
5
Nov
2025
3
Dec
2025
3
Jan
2026
2
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Infrastructure

leak site
OFFLINE

unreachable

http://cpjhb63lxycwbyus2n35ddyhdzxhf756l4rtwdttojzhzgppt3vpmsqd.onion/

8960ms

6d ago

leak site
OFFLINE

unreachable

http://rwsu75mtgj5oiz3alkfpnxnopcbiqed6wllyoffpuruuu6my6imjzuqd.onion/

2479ms

3d ago

leak site
OFFLINE

unreachable

http://benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd.onion/

4215ms

3d ago