Back to Threat Groups

desolator

INACTIVE

ransomware group

Desolator is a ransomware group that emerged in May 2025, targeting construction and engineering firms in Latin America

Victims
4
records
First Discovered
Aug 30, 2025
victim
Last Discovered
Sep 1, 2025
victim
Inactive Since
350
days
Countries
3
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
2
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Victims (4)

Construseñales S.A.

desolator🇨🇴 CO
Sep 1, 2025

Status: waiting | Expiration: 2025-09-04T00:00

Construction1.0Published
piscos.https

LEVEL

desolator🇺🇸 US
Sep 1, 2025

Status: waiting | Expiration: 2025-09-05T00:00

Financial Services1.0Published
level.com

Tri Thuc Software

desolator🇻🇳 VN
Aug 30, 2025

Status: waiting | Expiration: 2025-09-01T00:00

Technology1.0Published
banquyenphanmem.vn

Construcciones Sala

desolator🇨🇴 CO
Aug 30, 2025

Status: waiting | Expiration: 2025-09-04T00:00

Construction1.0Published
construccionessala.com

Infrastructure

leak site
OFFLINE

unreachable

http://po4tq2brx4rgwbdx4mac24fz34uuuf7oigosebp32n2462m2vxl6biqd.onion

1697ms

4d ago