Back to Threat Groups

FOG

INACTIVE

ransomware group

FOG ransomware is a sophisticated strain first observed in May 2024, initially targeting US educational institutions before expanding to other sectors including recreation and technology. The group exploits compromised VPN credentials for initial access and is notable for targeting VMware ESXi environments. FOG has been observed operating as a closed group and its operators' origins remain under investigation, with some researchers noting TTPs consistent with former ALPHV/BlackCat affiliates.

Victims
189
records
First Discovered
Jul 16, 2024
victim
Last Discovered
Mar 20, 2025
victim
Inactive Since
463
days
Countries
35
hit
Avg Discount
42%
4 settlements

Group Activity

Last 12 months
Jul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026

Victims (189)

Newtown Friends School (newtownfriends.org)

FOG🇺🇸 US
Mar 20, 2025

[AI generated] Newtown Friends School is a private, co-educational day school located in Newtown, Pennsylvania. It offers high-standard education to students fr...

Education1.0Published
newtownfriends.org

RAE (Real Academia Española) (rae.es)

FOG🇪🇸 ES
Mar 17, 2025

<1 GB

Education1.0Published
rae.es

University Diagnostic Medical Imaging, PC (udmi.net)

FOG🇺🇸 US
Mar 13, 2025

28.1 GB

Healthcare1.0Published
udmi.net

El Camino Real Academy (elcaminorealacademy)

FOG🇺🇸 US
Mar 13, 2025

111 GB

Education1.0Published
elcaminorealacademy.com

Wilkinson Rogers (wilkinsonrogers.com)

FOG
Mar 11, 2025

57 GB

Business Services1.0Published
wilkinsonrogers.com

Magnolia Manor (magnoliamanor.com)

FOG🇺🇸 US
Mar 10, 2025

54.6 GB

Healthcare1.0Published
magnoliamanor.com

WJCC Public Schools (wjccschools.org)

FOG🇺🇸 US
Mar 6, 2025

27.7 GB

Education1.0Published
wjccschools.org

Oberlin Cable Co-op (oberlin.net)

FOG🇺🇸 US
Mar 6, 2025

33 GB

Telecommunication1.0Published
oberlin.net

1X Internet

FOG🇩🇪 DE
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
1xinternet.de

Bizcode

FOG🇮🇹 IT
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
bizcode.it

Manning Publications Co.

FOG🇺🇸 US
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
manning.com

Engikam

FOG🇮🇹 IT
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
engicam.com

FHNW

FOG🇨🇭 CH
Mar 6, 2025

Extract from The 19 biggest gitlabs

Education1.0Published
fhnw.ch

Aeonsparx

FOG🇲🇾 MY
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
aeonsparx.com

CIE

FOG🇪🇸 ES2 groups: cactus
Mar 6, 2025

Extract from The 19 biggest gitlabs

Manufacturing1.0Published
cieautomotive.com

Flightsim studio

FOG
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
flightsim-studio.com

Neopoly

FOG🇩🇪 DE
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
neopoly.de

Kr3m

FOG🇩🇪 DE
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
kr3m.com

InfoReach

FOG🇺🇸 US
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
inforeachinc.com

Euranova

FOG🇧🇪 BE
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
euranova.eu

Inelmatic

FOG🇪🇸 ES
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
inelmatic.com

Kotliva

FOG🇷🇺 RU
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
koltiva.com

Inet

FOG🇹🇭 TH
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
inet.co.th

Blue Planet

FOG
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
blueplanet.com

Eumetsat

FOG🇩🇪 DE
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
eumetsat.int

Melexis

FOG🇧🇪 BE
Mar 6, 2025

Extract from The 19 biggest gitlabs

Technology1.0Published
melexis.com

USGS

FOG🇺🇸 US
Mar 6, 2025

Extract from The 19 biggest gitlabs

Public Sector1.0Published
usgs.gov

The 19 biggest gitlabs

FOG
Mar 5, 2025
Technology1.0Published

SCOLARO FETTER GRIZANTI & McGOUGH, P.C. (scolaro.com)

FOG🇺🇸 US
Mar 5, 2025

92.5 GB

Business Services1.0Published
scolaro.com

Pampili (pampili.com.br)

FOG🇧🇷 BR
Mar 4, 2025

36.3 GB

Consumer Services1.0Published
pampili.com.br

Grupo Baston Aerossol (baston.com.br)

FOG🇧🇷 BR
Mar 4, 2025

88.3 GB

Manufacturing1.0Published
baston.com.br

Central McGowan (centralmcgowan.com)

FOG🇺🇸 US
Mar 3, 2025

23.5 GB

Manufacturing1.0Published
centralmcgowan.com

Klesk Metal Stamping Co (kleskmetalstamping.com)

FOG🇺🇸 US
Mar 3, 2025

2.2 GB

Manufacturing1.0Published
kleskmetalstamping.com

Gitlabs: Synelixis Solutions, INGV, VMO Holdings

FOG
Feb 26, 2025

[AI generated] It seems there is a bit of confusion in the request as GitLab, Synelixis Solutions, INGV (National Institute of Geophysics and Volcanology), and ...

Technology1.0Published

Bayteq

FOG🇪🇨 EC
Feb 23, 2025

Extract from Gitlabs: Naphix, WDNA, Bayteq - Bayteq is a technology partner specializing in software development, staff augmentation, robotic process automation...

Technology1.0Published
bayteq.com

WDNA

FOG🇪🇸 ES
Feb 23, 2025

Extract from Gitlabs: Naphix, WDNA, Bayteq - WDNA (Wireless Domestic Network Auditors) is a Spanish business group with an international presence, developing in...

Technology1.0Published
wdna.com

Naphix

FOG🇦🇺 AU
Feb 23, 2025

Extract from Gitlabs: Naphix, WDNA, Bayteq - gitlab

Technology1.0Published
naphix.com

Gitlabs: Naphix, WDNA, Bayteq

FOG
Feb 23, 2025
1.0Published

Hochschule

FOG🇩🇪 DE
Feb 19, 2025

Extract from Gitlabs: Next TI, VISEO, Hochschule Trier - Hochschule Trier is a German university of applied sciences offering a wide range of practice-oriented ...

Education1.0Published
hochschule-trier.de

VISEO

FOG🇫🇷 FR
Feb 19, 2025

Extract from Gitlabs: Next TI, VISEO, Hochschule Trier - VISEO is a global technology company offering digital transformation services, including customer exper...

Technology1.0Published
viseo.com

Next TI

FOG🇮🇩 ID
Feb 19, 2025

Extract from Gitlabs: Next TI, VISEO, Hochschule Trier: Next TI is an Indonesian IT solutions company specializing in financial digital platforms for banking an...

Technology1.0Published
next-ti.co.id

Haggin Oaks Golf (hagginoaks.com)

FOG🇺🇸 US
Feb 19, 2025

29,2 GB

Hospitality and Tourism1.0Published
hagginoaks.com

Gitlabs: Next TI, VISEO, Hochschule Trier

FOG
Feb 19, 2025
Education1.0Published

Greencastle-Antrim Senior High School (gcasd.org)

FOG🇺🇸 US
Feb 17, 2025

7.6 GB

Education1.0Published
gcasd.org

Pamrya.de

FOG🇩🇪 DE
Feb 16, 2025

Extract from Gitlabs: Acqua development, QBurst, Pamyra.de- Pamyra.de is a platform that allows users to compare prices and book shipping services with over 600...

Transportation/Logistics1.0Published
pamyra.de

QBurst

FOG🇮🇳 IN
Feb 16, 2025

Extract from Gitlabs: Acqua development, QBurst, Pamyra.de- QBurst is a full-service software development company offering services in cloud enablement, data an...

Technology1.0Published
qburst.com

Acqua development

FOG🇷🇴 RO
Feb 16, 2025

Extract from Gitlabs: Acqua development, QBurst, Pamyra.de

Technology1.0Published
acqua.ro

Gitlabs: Acqua development, QBurst, Pamyra.de

FOG🇩🇪 DE
Feb 16, 2025

[AI generated] Gitlabs: Acqua development, QBurst, Pamyra.de refers to a combination of several tech companies. GitLab, a web-based DevOps lifecycle tool that p...

Technology1.0Published
pamyra.de

ADULLACT

FOG🇫🇷 FR
Feb 13, 2025

Extract from Gitlabs: Omydoo, Ayomi, ADULLACT- ADULLACT is a French association that develops and promotes a repository of free software for local authorities a...

Technology1.0Published
adullact.net

Ayomi

FOG🇫🇷 FR
Feb 13, 2025

Extract from Gitlabs: Omydoo, Ayomi, ADULLACT- Ayomi is a French platform that assists entrepreneurs in financing their businesses.

Financial Services1.0Published
ayomi.fr

Infrastructure

No sites tracked