Back to Threat Groups

helldown

INACTIVE

ransomware group

Helldown is a double-extortion ransomware group that emerged in late 2024, known for exploiting vulnerabilities in Zyxel firewalls and VPN appliances for initial access. The group targets SMBs across Europe and North America and was notable for publishing unusually large stolen datasets on its leak site. Helldown's origins and group infrastructure remain under investigation by threat intelligence researchers.

Victims
36
records
First Discovered
Aug 13, 2024
victim
Last Discovered
Nov 6, 2024
victim
Inactive Since
597
days
Countries
16
hit
Avg Discount
no settlements

Group Activity

Last 12 months
Jul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026

Victims (36)

klinkamkurpark

helldown🇩🇪 DE
Nov 6, 2024

klinik-am-kurpark.de

Healthcare1.0Published
klinik-am-kurpark.de

hausdesstiftens.org

helldown🇩🇪 DE
Nov 6, 2024

hausdesstiftens.org

Healthcare1.0Published
hausdesstiftens.org

nightnurse.ch

helldown🇨🇭 CH
Nov 6, 2024

www.nightnurse.ch

Healthcare1.0Published
nightnurse.ch

fuelco

helldown
Nov 6, 2024

fuelco-us.com

Energy1.0Published
fuelco-us.com

VALLEYFIRM

helldown🇭🇰 HK
Nov 6, 2024

valleyfirm.com

Business Services1.0Published
valleyfirm.com

children

helldown🇮🇳 IN
Nov 6, 2024

generaldentistryforchildren.com

Consumer Services1.0Published
generaldentistryforchildren.com

knoxlawcenter

helldown🇺🇸 US
Nov 6, 2024

www.knoxlawcenter.com

Business Services1.0Published
knoxlawcenter.com

AMERICANVENTURE

helldown🇺🇸 US
Nov 6, 2024

americanventures.com

Business Services1.0Published
americanventures.com

CSIKBS

helldown🇯🇵 JP
Nov 6, 2024

www.csikitchenandbath.com

Consumer Services1.0Published
csikitchenandbath.com

SANJACINTOCOUNY

helldown🇺🇸 US
Nov 6, 2024

www.co.san-jacinto.tx.us

Public Sector1.0Published
co.san-jacinto.tx.us

compassfs

helldown🇺🇸 US
Nov 6, 2024

www.compassfs.net

Financial1.0Published
compassfs.net

lacliniqueducoureur

helldown🇨🇦 CA
Nov 6, 2024

lacliniqueducoureur.com

Healthcare1.0Published
lacliniqueducoureur.com

TIVOLI-33

helldown🇫🇷 FR
Nov 6, 2024

tivoli-33.org

Healthcare1.0Published
tivoli-33.org

qualiform.cz

helldown🇨🇿 CZ
Nov 6, 2024

www.qualiform.cz

Manufacturing1.0Published
qualiform.cz

SMARTS-ENGINEER

helldown🇷🇺 RU
Nov 6, 2024

www.smarts-engineering.de

Technology1.0Published
smarts-engineering.de

HBGJEWISHCOMMUN

helldown🇺🇸 US
Aug 24, 2024

www.jewishharrisburg.org

Government1.0Published
jewishharrisburg.org

barryavenueplating

helldown🇺🇸 US
Aug 23, 2024

www.barryavenueplating.com

Manufacturing1.0Published
barryavenueplating.com

rsk-immobilien

helldown🇩🇪 DE
Aug 23, 2024

www.rsk-immobilien.de

Business Services1.0Published
rsk-immobilien.de

cincinnatipainphysicians

helldown🇺🇸 US
Aug 22, 2024

www.cincinnatipainphysicians.com

Healthcare1.0Published
cincinnatipainphysicians.com

kbosecurity.co.uk

helldown🇬🇧 GB
Aug 22, 2024

kbosecurity.co.uk

Business Services1.0Published
kbosecurity.co.uk

khonaysser.com

helldown🇱🇧 LB
Aug 22, 2024

khonaysser.com

Energy1.0Published
khonaysser.com

BARRYAVEPLATING

helldown🇺🇸 US
Aug 21, 2024

BARRYAVEPLATING

Manufacturing1.0Published
barryavenueplating.com

ATP

helldown🇮🇹 IT
Aug 20, 2024

atpsassari.it

Business Services1.0Published
atpsassari.it

Khonaysser

helldown🇱🇧 LB
Aug 19, 2024

Khonaysser

Energy1.0Published
khonaysser.com

kbo

helldown🇬🇧 GB
Aug 18, 2024

Here's something encrypted, password is required to continue reading.

1.0Published
kbosecurity.co.uk

zyxel

helldown🇳🇱 NL
Aug 17, 2024

Zyxel.eu is a European branch of Zyxel Communications Corporation, a global leader in networking solutions. It specializes in providing innovative and reliable ...

Technology1.0Published
zyxel.eu

hugwi

helldown🇨🇭 CH
Aug 14, 2024

Hugwi.ch is a Swiss-based company specializing in providing cutting-edge digital solutions, with a focus on web development, e-commerce, and custom software. Th...

Technology1.0Published
hugwi.ch

SCHLATTNER

helldown🇩🇪 DE
Aug 13, 2024
1.0Published
schlattner.de

deganis

helldown🇫🇷 FR
Aug 13, 2024
Business Services1.0Published
deganis.fr

XPERT Business Solutions GmbH

helldown🇩🇪 DE
Aug 13, 2024
Manufacturing1.0Published
bilstein.com

MyFreightWorld

helldown🇺🇸 US
Aug 13, 2024
Transportation/Logistics1.0Published
myfreightworld.com

cbmm

helldown🇧🇷 BR
Aug 13, 2024
Manufacturing1.0Published
cbmm.org

AZIENDA TRASPORTI PUBBLICI S.P.A.

helldown🇮🇹 IT
Aug 13, 2024
Transportation/Logistics1.0Published
atpsassari.it

briju

helldown🇵🇱 PL
Aug 13, 2024
Business Services1.0Published
briju.pl

vindix

helldown🇵🇱 PL
Aug 13, 2024
1.0Published
vindix.pl

Albatros

helldown🇮🇹 IT
Aug 13, 2024
1.0Published
albatrossrl.it

Infrastructure

No sites tracked