Back to Threat Groups

crypto24

Ransomware-as-a-Service

ransomware group

aka Public Data Storage <br/>Crypto24 emerged in early 2025 as a fast-growing double-extortion ransomware-as-a-service (RaaS) group. It targets organizations across industries such as financial services, healthcare, logistics, and technology, with notable victims in Malaysia, Colombia, Egypt, and India. The group executes rapid infiltration—often leveraging stolen credentials—encrypts files (appending the .crypto24 extension), and exfiltrates significant volumes of data (e.g., 2 TB from Vietnam’s CMC Group). Affiliate-oriented operations are indicated by their presence on RAMP forums, suggesting professional recruitment and offering free decryption for small file samples to entice victims.

Victims
43
records
First Discovered
Apr 8, 2025
victim
Last Discovered
Apr 12, 2026
victim
Inactive Since
75
days
Countries
24
hit
Avg Discount
no settlements

Group Activity

Last 12 months
7
Jul
2025
3
Aug
2025
1
Sep
2025
4
Oct
2025
2
Nov
2025
3
Dec
2025
2
Jan
2026
1
Feb
2026
5
Mar
2026
3
Apr
2026
May
2026
Jun
2026

Victims (43)

Industrias Guerra

crypto24🇪🇸 ES
Apr 12, 2026

Industrias Guerra, S.A. We have successfully acquired and exfiltrated 700GB of proprietary data from the ... PUBLISHED ES View

Manufacturing700GB2.0Published

Katcon Global

crypto24🇲🇽 MX
Apr 2, 2026

Katcon Global Founded in 1993 in Monterrey, Mexico, Katcon is a leading global Tier 1 supplier ... PUBLISHED MX View

Manufacturing2.0Published
katcon.com

Industrias Guerra, S.A.

crypto24🇨🇱 CL
Apr 2, 2026

[AI generated] Industrias Guerra, S.A. is a prominent Spanish company known for the manufacturing of marine cranes, forestry machinery, and special equipment. I...

Manufacturing3.0Published
armoniaips.com

ActionPower

crypto24🇰🇷 KR
Mar 27, 2026

ActionPower ActionPower is an AI innovation company that automates documentation through 'da ... PUBLISHED KR View

Technology1.0Published
actionpower.kr

Estudio O'Farrell

crypto24🇦🇷 AR
Mar 24, 2026

Estudio O'Farrell O'Farrell is a leading full service law firm in Argentina, with the longest trac ... PUBLISHED AR View

Law1.0Published
estudio-ofarrell.com

Invaccs software technologies pvt ltd

crypto24🇮🇳 IN
Mar 10, 2026

Invaccs software technologies pvt ltd Invaccs is a leading ERP system provider in India, playing a key role in impleme ... PUBLISHED IN View

Technology1.0Published
invaccs.com

Comprehensive Orthopaedics and Musculoskeletal Care, LLC

crypto24🇺🇸 US
Mar 9, 2026

Comprehensive Orthopaedics and Musculoskeletal Care, LLC We have leaked the sensitive HIPAA and PII data of over 100,000 individuals from ... PUBLISHED US View

Healthcare7.0Published
advantageorthopedic.com

Rowad Modern Engineering

crypto24🇪🇬 EG
Mar 5, 2026

Rowad Modern Engineering Rowad Modern Engineering (RME) is a leading Egyptian construction conglomerate s ... PUBLISHED EG View

Construction700GB1.0Published
rowad-rme.com

Putnam Precision, Inc.

crypto24🇺🇸 US
Feb 9, 2026

Putnam Precision, Inc. Putnam Precision is a premier manufacturer specializing in high-precision compon ... PUBLISHED US View

Manufacturing1.0Published
putnamprecision.com

MRC Prion Unit and Institute of Prion Diseases

crypto24🇬🇧 GB
Jan 24, 2026

MRC Prion Unit and Institute of Prion Diseases We successfully infiltrated the internal networks of the MRC Prion Laboratory an ... PUBLISHED GB View

Healthcare1.0Published
ucl.ac.uk

Yource Bulgaria & Greece

crypto24🇧🇬 BG
Jan 21, 2026

Yource Bulgaria & Greece Yource Bulgaria & Greece is a customer experience and contact center services pr ... PUBLISHED BG View

Business Services1.0Published
yourcebulgaria.cc

Unified Assessment Platform ExamRoom.AI

crypto24🇺🇸 US
Dec 23, 2025

***

Education1.0Published
examroom.ai

SASP SNCC AUTOMATISME SOLUTIONS PROCESS

crypto24🇫🇷 FR
Dec 17, 2025

***

Technology1.0Published
sasp.fr

Hollysys Asia Pacific

crypto24🇸🇬 SG
Dec 1, 2025

[AI generated] Hollysys Asia Pacific is part of Hollysys Automation Technologies Ltd, a leading provider of industrial and rail transportation automation soluti...

Technology1.0Published
hollysys.com

Bayu Buana Travel Service

crypto24🇮🇩 ID
Nov 15, 2025

We have successfully extracted over 500GB of documents from your internal network, including internal company documents, customer and project information, and o...

Hospitality and Tourism6.0Published
bayubuanatravel.com

AsahiKASEI MICRODEVICES

crypto24🇺🇸 US
Nov 12, 2025

...

Technology1.0Published
akm.com

Meinhardt Group

crypto24🇸🇬 SG
Oct 27, 2025

...

Construction1.0Published
meinhardtgroup.com

Bayu Buana Travel

crypto24🇮🇩 ID
Oct 27, 2025

...

Hospitality and Tourism1.0Published
bayubuanatravel.com

U.S. Vanadium Holding Company LLC

crypto24🇺🇸 US
Oct 21, 2025

We have successfully extracted over 300GB of documents from your internal network, including internal company documents, customer and project information, and o...

Manufacturing5.0Published
usvanadium.com

Banco Hipotecario del Uruguay

crypto24🇺🇾 UY
Oct 3, 2025

We have exfiltrated over 700GB of most sensitive highly sensitive customer PII, financial/accounting records, legal/contracts, property/title documents, credit ...

Financial Services7.0Published
bhu.net

Generali Group

crypto24🇮🇹 IT
Sep 18, 2025

***

Financial Services1.0Published
generali.com

Palmgold Management Sdn Bhd

crypto24🇲🇾 MY
Aug 18, 2025

We have exfiltrated over 500GB of most sensitive and business-critical data from palmgold's internal network. This includes data from both the Casino Division a...

Hospitality and Tourism7.0Published
palmgold-mgmt.com

CMS Legal Services EEIG

crypto24🇩🇪 DE
Aug 16, 2025

We are in possession of highly confidential data belonging to CMS, one of the largest international law firms, including government and national infrastructure ...

Business Services7.0Published
cms.law

Karndean International, LLC

crypto24🇺🇸 US
Aug 15, 2025

We have exfiltrated over 600GB of your most sensitive corporate data, including financial, technical, operational, and personal information covering customers, ...

Consumer Services7.0Published
karndean.com

SOUBEIRAN CHOBET S.R.L.

crypto24🇮🇹 IT
Jul 22, 2025

We have exfiltrated over 300GB of most sensitive and business-critical data from internal servers including full DBs including Microsoft Dynamics GP database, f...

Manufacturing7.0Published
sirius.to.it

TransCore ITS, LLC

crypto24🇦🇪 AE
Jul 20, 2025

We’ve successfully breached the internal network of TransCore’s Dubai office.Over 200 GB of internal data has been exfiltrated, including in-development source ...

Technology7.0Published
transcore.com

Artemis Healthcare, Inc

crypto24🇺🇸 US
Jul 16, 2025

It contains sensitive personal data, including medical records, official documents, and imaging files of millions of patients, as well as various databases.

Healthcare7.0Published
arianadx.com

A-Qroup Sığorta Şirkəti

crypto24🇦🇿 AZ
Jul 16, 2025

The entire InsureAZ database has been leaked — including real insurance documents and all related materials such as medical, auto, and internal corporate record...

Financial Services7.0Published
a-group.az

Tan Chong Motor Holdings Berhad

crypto24🇲🇾 MY
Jul 16, 2025

We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of tanchong - NAV, BRASSTAX, VTS, CRM, E-INVOICE,...),Legal and HR docum...

Manufacturing6.0Published
tanchonggroup.com

Warisan TC Holdings Berhad

crypto24🇲🇾 MY
Jul 16, 2025

We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of wtc - TOURPLAN, CRM, E-INVOICE,...),Legal and HR documents, Financial...

Transportation/Logistics6.0Published
warisantc.com

Larimart S.P.A

crypto24🇮🇹 IT
Jul 16, 2025

We have secured 2TB of confidential data : NATO-linked armor specifications and ballistic protection designs,EUC/EUS certificates and UAMA export control docume...

Manufacturing6.0Published
larimart.it

Tien Tuan Pharmaceutical Machinery Co. Ltd

crypto24🇻🇳 VN
Jun 5, 2025

[AI generated] Tien Tuan Pharmaceutical Machinery Co. Ltd is a leading provider of integrated software solutions for the pharmaceutical industry. The Vietnam-ba...

Healthcare1.0Published
tientuan.com.vn

FORTÉ

crypto24🇺🇸 US
Jun 5, 2025

[AI generated] FORTÉ is a fitness-focused technology company that provides a subscription-based streaming platform. It offers live and on-demand access to bouti...

Consumer Services1.0Published
ourforte.com

Choice AG

crypto24🇩🇪 DE
May 29, 2025

[AI generated] "Choice AG" is a Switzerland-based company that specializes in providing solutions for investment and risk management. It offers software as well...

Financial Services1.0Published
choice.de

Elite Advanced Laser Corporation ( Elaser )

crypto24🇹🇼 TW
May 28, 2025

[AI generated] Elite Advanced Laser Corporation, or Elaser, is a company that specializes in the manufacturing of semiconductor and printed circuit boards. They...

Technology1.0Published
elaser.com.tw

N8XT

crypto24🇸🇬 SG
Apr 23, 2025

3 TB data including Customer information, DB data, Technical documents, Projects data and Company-related documents etc ... in Servers and Nas.

Technology7.0Published
n8xt.net

CMC Corperation

crypto24🇻🇳 VN
Apr 12, 2025

2 TB data including Token Data, Database Data, Website Data, ... from MariaDB, MongoDB and RARS-DB etc ... in DataCenter.

Technology6.0Published
ca.cmc.vn

ModulusGroup,Ludi-SFM

crypto24🇲🇨 MC
Apr 10, 2025

casino customer info, db, ERP data, casino system projects source code and so on.

Hospitality and Tourism7.0Published
modulusgroup.eu

Taxplan

crypto24🇨🇦 CA
Apr 8, 2025

Tax-related documents and data, database and programs

Financial Services3.0Published
taxplann.ca

Mochtar Karuwin Komar: Indonesian law firm - MKK

crypto24🇮🇩 ID
Apr 8, 2025

Legal advice, case-related documents, financial information, contracts, billing

Business Services5.0Published
mkklaw.net

technoforte software pvt ltd

crypto24🇮🇳 IN
Apr 8, 2025

All source codes of technoforte's main project - Palms(including mobile version)

Technology5.0Published
technoforte.co.in

International Busines Service

crypto24🇪🇬 EG
Apr 8, 2025

Identity cards including front and back of about 3,000 people (image, pdf), HR reports, Pay documents

Business Services6.0Published
ibsns.com

Iris Neofinanciera

crypto24🇨🇴 CO
Apr 8, 2025

All files of google drives, google chatting data ,workmanager documents(for last 5years) ,sql dbs and personal information of clients and staffs.

Financial Services6.0Published
iris.com.co

Infrastructure

leak site
ONLINE
http://j5o5y2feotmhvr7cbcp2j2ewayv5mn5zenl3joqwx67gtfchhezjznad.onion

1667ms

5d ago