clop
ACTIVEransomware group
🇷🇺RussiaClop (also spelled Cl0p) is a financially motivated ransomware group attributed to the FIN11/TA505 threat cluster with assessed ties to Russia and Ukraine. The group pioneered mass exploitation of file-transfer vulnerabilities, most notably Accellion FTA (2020), GoAnywhere MFT (2023), and MOVEit Transfer (2023), the latter affecting over 2,700 organizations worldwide in what became one of the largest data-theft campaigns in history. Clop primarily relies on data extortion rather than encryption in recent campaigns.
Group Activity
Last 12 monthsVictims (1309)
ZEBRA.COM
Data exfiltrated included the following: Database, Project - files, CAD - files Total size: 8Tb Revenue: $5,600,000,000
NUVITIA.COM
Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000
IPMSOLUTIONS.SK
Data exfiltrated included the following: PDF files, Cad-files, Soft Total size: 253Gb Revenue: $5,000,000
ECCELLENT.COM
Data exfiltrated included the following: DBF files, Cad-files, Project, Soft, Backups Total size: 241Gb Revenue: $5,000,000
STNET.IT
Data exfiltrated included the following: Database, Project Total size: 13.2Gb Revenue: $5,000,000
QCPL.IN
Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000
FLUIDLOGIC.COM
Data exfiltrated included the following: Database, Project,Cad-files Total size: 26.4Gb Revenue: $5,000,000
MIDLANDIND.COM.AU
Data exfiltrated included the following: Database, Project Total size: 0.5Gb Revenue: $5,000,000
ITKHOLDING.HU
Data exfiltrated included the following: Database, Projects Total size: 40,7Gb Revenue: $1,700,000,000
G3AEROSPACE.COM
Data exfiltrated included the following: Database, Projects Total size: 319Gb Revenue: $1,000,000
ARCHERGREY.COM
Data exfiltrated included the following: Database, Projects Total size: 1,84Gb Revenue: <$5,000,000
OMNITANKER.COM
Data exfiltrated included the following: Database, Projects, SQL Backups, Soft installers, Jpeg, Png, PDF - files Total size: 83Gb Revenue: $10,000,000
LIFESTRAW.COM
Data exfiltrated included the following: Database, Projects, Backups, Logs, Soft installers, PDF, TXT, XML - files Total size: 168Gb Revenue: $200,000,000
SPKAA.COM
Data exfiltrated included the following: Database, Projects Total size: 581Gb Revenue: $7,600,000
IVALUESYS.COM
Data exfiltrated included the following: Database, Projects, Backups Total size: 109Gb Revenue: $8,100,000
NUOVACMM.COM
Data exfiltrated included the following: Database, Projects, Soft installers Total size: 279Gb Revenue: $6,600,000
THERMOS.COM
Data exfiltrated included the following: Database, Projects, Soft installers Total size: 285Gb Revenue: $9,000,000
WATERLANDPE.COM
Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $5,800,000
9ALTITUDES.COM
Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $15,000,000
INTELLIHOT.COM
Data exfiltrated included the following: Database, Projects, Backups, Soft installers, Updates, XML - files Total size: 271Gb Revenue: $27,000,000
INTELLIGENTGROWTHSOLUTIONS.COM
Data exfiltrated included the following: Database, Project, PDF, XLSX, XLS, DOCX - files Total size: 261Gb Revenue: $31,000,000
HONGHE-TECH.COM
Data exfiltrated included the following: Database, Project - files Total size: 1,588Gb Revenue: $470,000,000
ATOMBERG.COM
Data exfiltrated included the following: Database, Project - files Total size: 980Gb Revenue: $68,000,000
CLOVER.COM
Data exfiltrated included the following: Database, Project - files Total size: 651Gb Revenue: $400,000,000
JPMGROUP.CO.IN
Data exfiltrated included the following: Database, Project - files Total size: 75,4Gb Revenue: $400,000,000
BRILLONCONSUMER.COM (BRILLONCONSUMER.COM)
Data exfiltrated included the following: Database, Project - files Total size: 22,4Gb Revenue: $100,000,000
SUUNTO.CN (SUUNTO.COM)
Data exfiltrated included the following: Database, Project - files Total size: 1470Gb Revenue: $111,000,000
SMAPCENTER.UAH.EDU
Data exfiltrated included the following: Database, Project - files Total size: 6,08Gb Revenue: $113,000,000
TRISTAR.COM
Data exfiltrated included the following: Database, Project - files Total size: 1579,9Gb Revenue: $1,000,000,000
MAMASANDPAPAS.COM
Data exfiltrated included the following: Database, Project - files Total size: 1,18Gb Revenue: $131,000,000
CORNELIUS.COM
Data exfiltrated included the following: Database, Project, PDF, TXT, DOC - files Total size: 3684Gb Revenue: $269,800,000
MAMMUT.COM
Data exfiltrated included the following: .png files, files Windchil Total size: 136Gb Revenue: $281,000,000
PARTECH.COM
Data exfiltrated included the following: Database, Project, Cad-files, Backups Total size: 24Gb Revenue: $475,700,000
STARKEY.COM
Data exfiltrated included the following: Database, Project Total size: 3030Gb Revenue: $939,200,000
LARGAN.COM.TW
Data exfiltrated included the following: Project, Soft Total size: 56Gb Revenue: $1,700,000,000
TOASTTAB.COM
Data exfiltrated included the following: project, backup database, logs Total size: 215Gb Revenue: $6,400,000,000
IRCO.COM
Data exfiltrated included the following: Cad-files, PDF drawings, diagrams, product presentations, specifications, manuals and instructions Total size: 5564Gb ...
ALDOGROUP.COM (ALDOSHOES.COM)
Data exfiltrated included the following: TSV files, soft, Projects, Cad-files Total size: 424Gb Revenue: $14,800,000,000
PHILIPS.COM
Data exfiltrated included the following: PDF drawings, diagrams, blueprints Total size: 13.5Gb Revenue: $20,700,000,000
FISERV.COM
Data exfiltrated included the following: Projects, Cad-files, files Windchil, Soft Total size: 874Gb Revenue: $21,200,000,000
GE.COM
Data exfiltrated included the following: Software backups, system files, projects Total size: 391Gb Revenue: $113,000,000,000
SHELL.COM (August 2026)
Data exfiltrated included the following: Engineering drawings, photos of the facilities, scans of facility testing reports, project plans Total size: 89Gb Rev...
NETPOWER.COM
Data exfiltrated included the following: Projects, Cad-files, Backup files Windchil Total size: 230Gb Revenue: $370,900,000
MINDRAY.COM
[AI generated] Mindray is a Chinese medical device company headquartered in Shenzhen, China. It deve…
CONTINENTAL.AERO
[AI generated] N/A…
BLUEVISTALLC.COM
INTEGRALIFE.COM
[AI generated] Integra LifeSciences, operating under integralife.com, is a US-based medical technology company headquartered in Princeton, New Jersey. It specia...
INJURYLAWYERS.COM
[AI generated] INJURYLAWYERS.COM is a US-based legal services platform that connects individuals who have suffered personal injuries with qualified attorneys. O...
AIGHEALTHCARE.IN
[AI generated] N/A
CLOUD.CLEARWAYGROUP.COM
[AI generated] N/A
Infrastructure
http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion1690ms
6m ago
unreachable
http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/8296ms
15h ago
unreachable
http://6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onion/remote0/8761ms
5h ago
unreachable
http://npkoxkuygikbkpuf5yxte66um727wmdo2jtpg2djhb2e224i4r25v7ad.onion8150ms
1h ago
malformed url
http://ekbgzchl6x2ias37.onion3d ago
unreachable
http://qahjimrublt35jlv4teesicrw6zhpwhkb6nhtonwxuqafmjhr7hax2id.onion/2641ms
4h ago
unreachable
http://l4rdimrqyonulqjttebry4t6wuzgjv5m62rnpjho3q22a6maf6d5evyd.onion/4021ms
18m ago
http error
http://htmxyptur5wfjrd7uvg23snupub2pbtlfelk45n37b3augl2w4eearid.onion/remote0/6065ms
5h ago
unreachable
http://frgp3f3u2ddafv4ny7tqn6tc674m6fyymyywoaxot7xskbjmiyhhsyqd.onion/4646ms
54m ago
unreachable
http://3ws3t4uo7fehnn4qpmadk3zjrxta5xlt3gsc5mx4sztrsy7ficuz5ayd.onion/8625ms
2h ago
unreachable
http://amnwxasjtjc6e42siac6t45mhbkgtycrx5krv7sf5festvqxmnchuayd.onion/2047ms
1h ago
unreachable
http://2vi357dgf4246nvrcsavrt5jsrm7pfqim4t2n3ykzedjim5bzqezmlyd.onion4462ms
2h ago