crypto24
Ransomware-as-a-Serviceransomware group
aka Public Data Storage <br/>Crypto24 emerged in early 2025 as a fast-growing double-extortion ransomware-as-a-service (RaaS) group. It targets organizations across industries such as financial services, healthcare, logistics, and technology, with notable victims in Malaysia, Colombia, Egypt, and India. The group executes rapid infiltration—often leveraging stolen credentials—encrypts files (appending the .crypto24 extension), and exfiltrates significant volumes of data (e.g., 2 TB from Vietnam’s CMC Group). Affiliate-oriented operations are indicated by their presence on RAMP forums, suggesting professional recruitment and offering free decryption for small file samples to entice victims.
Group Activity
Last 12 monthsVictims (43)
Industrias Guerra
Industrias Guerra, S.A. We have successfully acquired and exfiltrated 700GB of proprietary data from the ... PUBLISHED ES View
Katcon Global
Katcon Global Founded in 1993 in Monterrey, Mexico, Katcon is a leading global Tier 1 supplier ... PUBLISHED MX View
Industrias Guerra, S.A.
[AI generated] Industrias Guerra, S.A. is a prominent Spanish company known for the manufacturing of marine cranes, forestry machinery, and special equipment. I...
ActionPower
ActionPower ActionPower is an AI innovation company that automates documentation through 'da ... PUBLISHED KR View
Estudio O'Farrell
Estudio O'Farrell O'Farrell is a leading full service law firm in Argentina, with the longest trac ... PUBLISHED AR View
Invaccs software technologies pvt ltd
Invaccs software technologies pvt ltd Invaccs is a leading ERP system provider in India, playing a key role in impleme ... PUBLISHED IN View
Comprehensive Orthopaedics and Musculoskeletal Care, LLC
Comprehensive Orthopaedics and Musculoskeletal Care, LLC We have leaked the sensitive HIPAA and PII data of over 100,000 individuals from ... PUBLISHED US View
Rowad Modern Engineering
Rowad Modern Engineering Rowad Modern Engineering (RME) is a leading Egyptian construction conglomerate s ... PUBLISHED EG View
Putnam Precision, Inc.
Putnam Precision, Inc. Putnam Precision is a premier manufacturer specializing in high-precision compon ... PUBLISHED US View
MRC Prion Unit and Institute of Prion Diseases
MRC Prion Unit and Institute of Prion Diseases We successfully infiltrated the internal networks of the MRC Prion Laboratory an ... PUBLISHED GB View
Yource Bulgaria & Greece
Yource Bulgaria & Greece Yource Bulgaria & Greece is a customer experience and contact center services pr ... PUBLISHED BG View
Unified Assessment Platform ExamRoom.AI
***
SASP SNCC AUTOMATISME SOLUTIONS PROCESS
***
Hollysys Asia Pacific
[AI generated] Hollysys Asia Pacific is part of Hollysys Automation Technologies Ltd, a leading provider of industrial and rail transportation automation soluti...
Bayu Buana Travel Service
We have successfully extracted over 500GB of documents from your internal network, including internal company documents, customer and project information, and o...
AsahiKASEI MICRODEVICES
...
Meinhardt Group
...
Bayu Buana Travel
...
U.S. Vanadium Holding Company LLC
We have successfully extracted over 300GB of documents from your internal network, including internal company documents, customer and project information, and o...
Banco Hipotecario del Uruguay
We have exfiltrated over 700GB of most sensitive highly sensitive customer PII, financial/accounting records, legal/contracts, property/title documents, credit ...
Generali Group
***
Palmgold Management Sdn Bhd
We have exfiltrated over 500GB of most sensitive and business-critical data from palmgold's internal network. This includes data from both the Casino Division a...
CMS Legal Services EEIG
We are in possession of highly confidential data belonging to CMS, one of the largest international law firms, including government and national infrastructure ...
Karndean International, LLC
We have exfiltrated over 600GB of your most sensitive corporate data, including financial, technical, operational, and personal information covering customers, ...
SOUBEIRAN CHOBET S.R.L.
We have exfiltrated over 300GB of most sensitive and business-critical data from internal servers including full DBs including Microsoft Dynamics GP database, f...
TransCore ITS, LLC
We’ve successfully breached the internal network of TransCore’s Dubai office.Over 200 GB of internal data has been exfiltrated, including in-development source ...
Artemis Healthcare, Inc
It contains sensitive personal data, including medical records, official documents, and imaging files of millions of patients, as well as various databases.
A-Qroup Sığorta Şirkəti
The entire InsureAZ database has been leaked — including real insurance documents and all related materials such as medical, auto, and internal corporate record...
Tan Chong Motor Holdings Berhad
We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of tanchong - NAV, BRASSTAX, VTS, CRM, E-INVOICE,...),Legal and HR docum...
Warisan TC Holdings Berhad
We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of wtc - TOURPLAN, CRM, E-INVOICE,...),Legal and HR documents, Financial...
Larimart S.P.A
We have secured 2TB of confidential data : NATO-linked armor specifications and ballistic protection designs,EUC/EUS certificates and UAMA export control docume...
Tien Tuan Pharmaceutical Machinery Co. Ltd
[AI generated] Tien Tuan Pharmaceutical Machinery Co. Ltd is a leading provider of integrated software solutions for the pharmaceutical industry. The Vietnam-ba...
FORTÉ
[AI generated] FORTÉ is a fitness-focused technology company that provides a subscription-based streaming platform. It offers live and on-demand access to bouti...
Choice AG
[AI generated] "Choice AG" is a Switzerland-based company that specializes in providing solutions for investment and risk management. It offers software as well...
Elite Advanced Laser Corporation ( Elaser )
[AI generated] Elite Advanced Laser Corporation, or Elaser, is a company that specializes in the manufacturing of semiconductor and printed circuit boards. They...
N8XT
3 TB data including Customer information, DB data, Technical documents, Projects data and Company-related documents etc ... in Servers and Nas.
CMC Corperation
2 TB data including Token Data, Database Data, Website Data, ... from MariaDB, MongoDB and RARS-DB etc ... in DataCenter.
ModulusGroup,Ludi-SFM
casino customer info, db, ERP data, casino system projects source code and so on.
Taxplan
Tax-related documents and data, database and programs
Mochtar Karuwin Komar: Indonesian law firm - MKK
Legal advice, case-related documents, financial information, contracts, billing
technoforte software pvt ltd
All source codes of technoforte's main project - Palms(including mobile version)
International Busines Service
Identity cards including front and back of about 3,000 people (image, pdf), HR reports, Pay documents
Iris Neofinanciera
All files of google drives, google chatting data ,workmanager documents(for last 5years) ,sql dbs and personal information of clients and staffs.
Infrastructure
http://j5o5y2feotmhvr7cbcp2j2ewayv5mn5zenl3joqwx67gtfchhezjznad.onion1667ms
5d ago