Back to Threat Groups

benzona

INACTIVE

ransomware group

Benzona is a financially motivated ransomware group that emerged in late 2024, targeting small to mid-sized organization

Victims
13
records
First Discovered
Nov 26, 2025
victim
Last Discovered
Feb 22, 2026
victim
Inactive Since
220
days
Countries
8
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Oct
2025
5
Nov
2025
3
Dec
2025
3
Jan
2026
2
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026

Infrastructure

leak site
OFFLINE

unreachable

http://rwsu75mtgj5oiz3alkfpnxnopcbiqed6wllyoffpuruuu6my6imjzuqd.onion/

8944ms

6d ago

leak site
OFFLINE

unreachable

http://cpjhb63lxycwbyus2n35ddyhdzxhf756l4rtwdttojzhzgppt3vpmsqd.onion/

8966ms

1d ago

leak site
OFFLINE

unreachable

http://benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd.onion/

8780ms

3d ago