bjorka
ransomware group
Hellcome Bjorkanism <br/>Bjorka emerged as a prominent data-extortion actor and hacktivist initially active in 2022, targeting Indonesian institutions with massive data leaks—including voter records, police data, and internal telecom and utility datasets. After going quiet in 2023, the actor resurfaced in early 2025, now positioning under the name Babuk2, leveraging legacy branding from the Babuk ransomware group to amplify perceived credibility and fuel data extortion operations. Notably, Bjorka has not been linked to deploying true ransomware payloads; rather, the strategy revolves around reputational leverage via data leaks and selecting branding for psychological impact.
Group Activity
Last 12 monthsVictims (2)
Infrastructure
https://bjork.ai/1246ms
12h ago
https://netleaks.net/contact/248ms
3d ago
https://netleaks.net/databases/244ms
2d ago
https://netleaks.net/1097ms
1d ago
unreachable
http://3lce6cov7sj7vovrr3cbanqoolhgfgqqcvjrtlzlqnex7esdz33mdoqd.onion/2552ms
4d ago