Back to Threat Groups

hellogookie

INACTIVE

ransomware group

HelloGookie is a rebrand of the HelloKitty ransomware group announced in April 2024, releasing previously stolen data fr

Victims
3
records
First Discovered
Apr 19, 2024
victim
Last Discovered
Apr 19, 2024
victim
Inactive Since
850
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Victims (3)

Hey everyone! Some private keys here.

hellogookie
Apr 19, 2024

LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb3dJQkFBS0NBUUVBNENoODBXOTFVc09raE9jSDNxVjJ6eTZlUGxhTzVCeXNQOGpyVThMcVB0bVpiR3lXCmRNV3dkb2FyTDJZVituRDZ4dVYzLzd3...

Technology7.0Published

Hey cisco!

hellogookie🇺🇸 US
Apr 19, 2024

You lied to us and play for time to kick us out. We will meet you soon, again. Next time you'll have no chance. cisco.com\Administrator:500:aad3b435b51404eeaad3...

Technology7.0Published
cisco.com

CD Projekt!

hellogookie🇵🇱 PL
Apr 19, 2024

How you doin? I just remembered some passwords... do you have it? ah, whatever... just leave it here... w3: oJX&S5678536Y8as%23 gwent: GyrS^&4A89x, w3rtx: NIh\*...

Technology6.0Published
cdprojektred.com

Infrastructure

leak site
OFFLINE

unreachable

http://gookie256cvccntvenyxrvn7ht73bs6ss3oj2ocfkjt5y6vq6gfi2tad.onion/

2560ms

5d ago