Back to Threat Groups

knight

INACTIVERansomware-as-a-Service

ransomware group

Knight is a Ransomware-as-a-Service (RaaS) operation first observed in August 2023, believed to be a rebrand or evolution of the Cyclops ransomware family. The ransomware targets both Windows and Linux/ESXi systems, encrypting files with strong symmetric and asymmetric cryptography and appending the .knight extension. Knight affiliates employ a double-extortion model, stealing sensitive data before encryption and threatening to leak it via a Tor-based site. Distribution methods include phishing campaigns delivering malicious attachments, exploitation of vulnerabilities in public-facing services, and use of previously compromised credentials. The ransomware is modular, allowing affiliates to deploy only the components needed for a given environment, and has been used in attacks on healthcare, manufacturing, finance, and technology sectors across North America, Europe, and Asia. Knight’s leak site lists victims with partial data dumps to pressure payment, escalating to full leaks if negotiations fail.

Victims
55
records
First Discovered
Jul 1, 2023
victim
Last Discovered
Feb 12, 2024
victim
Inactive Since
865
days
Countries
17
hit
Avg Discount
no settlements

Group Activity

Last 12 months
Jul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026

Victims (55)

DHX–Dependable Hawaiian Express

knight🇺🇸 US
Feb 12, 2024

DHX–Dependable Hawaiian Express20 GB of accounting documents were stolenbackup NAS server stolenDHX-Dependable Hawaiian Express is the leading ocean freight com...

Transportation/Logistics4.0Published
dhx.com

GRUPO SCA(Release of all data)

knight🇪🇸 ES
Feb 5, 2024

https://www.gruposca.com/historia/Release of all dataEnjoy:http://uzfrntnmwojla5v4w3xvpxerjg43kuzqxmtspqhi5qclwtof5ibgonyd.onion/GRUPOSCA/GRUPOSCA.rar5.png 46.4...

Manufacturing6.0Published
gruposca.com

FEPCO Zona Franca SAS

knight🇨🇴 CO
Feb 4, 2024

we have +100GB of confidential data, bank contracts, invoices, customer data, company invoices, company receipts.

Business Services5.0Published

AbelSantosyAsociados

knight🇦🇷 AR
Feb 2, 2024

We'll provide a sample of the data. Enjoy:http://uzfrntnmwojla5v4w3xvpxerjg43kuzqxmtspqhi5qclwtof5ibgonyd.onion/AbelSantosyAsociados/sampledata.rarOur activitie...

Financial5.0Published
sampledata.rarour

CityDfDefiance(Disclosure of all)

knight🇺🇸 US
Feb 1, 2024

Because of their lack of cooperation, we had to release all the data, which included law enforcement documents and law enforcement videos, including some of the...

Government7.0Published
interesting.the

DIROX LTDA (Vietnã)

knight🇻🇳 VN
Feb 1, 2024

Dirox is a proven turn-key digital solution partner with 20 years of experience, over 120 talented employees, and offices in the United States (Los Angeles), Pa...

Technology6.0Published
dirox.net

Chamber of Deputies of Romania (Camera Deputaților din România)

knight🇷🇴 RO
Jan 29, 2024

 We have obtained more than  size of  250,000 MB   documents and contracts and more information from Chamber of Deputies of Romania &nb...

Government7.0Published

ABECOM LTDA

knight🇧🇷 BR2 groups: avaddon
Jan 29, 2024

We have more than 170 GB of confidential ABECOM company files, contracts, finances, projects, customer and employee data, reports, sales and purchase documents,...

Technology6.0Published
cnpj.info

Agro Baggio LTDA

knight🇧🇷 BR
Jan 7, 2024

Apparently, the DPO/LGPD rules that Agro Baggio holds so dear are not working properly. But this time you can't get away. Your servers are lying down and the ne...

Agriculture and Food Production7.0Published
ykp.com.br

GRUPO SCA

knight🇪🇸 ES
Jan 6, 2024

We got over 100Gb of data from their network, containing their confidential files, and it looks like they don't care about their clients' dataGrupo SCA es una f...

Business Services1.0Published
gruposca.com

Crace Medical Centre

knight🇦🇺 AU
Dec 16, 2023

30 GB of data. We wait you in the chat.Phone: (02) 6241 0249.Oops, what's all this about? "Nothing happened?", "What do you want us to do?".You have "polite" re...

Healthcare6.0Published
cracemc.com.au

Akir Metal San Tic Ltd ti was hacked. All confidential information was stolen

knight🇹🇷 TR
Dec 13, 2023

Who is akir Metal San Tic Ltd tiAkım Metal produces metal parts in Istanbul for automotive, home appliance, motor, aircraft and defense industries using machini...

Manufacturing3.0Published
akimmetal.com.tr

DAIHO INDUSTRIAL Co.,Ltd.

knight🇯🇵 JP
Dec 13, 2023

Since its foundation in 1937, the Daiho Group has enjoyed a top-rank reputation in the plastics processing industry in Japan. They have been manufacturing and s...

Manufacturing1.0Published
higashiyama.com

cityofdefiance.com

knight🇺🇸 US
Dec 13, 2023

We have obtained more than 390Gb files on our internal network, which contain employee files,law enforcement video,mail and various confidential documents such ...

Public Sector5.0Published
cityofdefiance.com

FUTURA Fundamentsysteme was hacked

knight🇩🇪 DE
Nov 30, 2023

ALL THE CRITICAL DOCUMENTS WERE STOLENAbout FUTURA FundamentsystemeHeadquarters: 29 Westring, Schuby, Schleswig-Holstein, 24850, GermanyPhone Number: +49 462195...

Manufacturing7.0Published
futura-energiesparen.de

Contitec Empresarial

knight🇧🇷 BR
Nov 30, 2023

https://www.contitec.net.br/    *250GB OF STOLEN DATA* Atuamos no mercado auxiliando empresas nas áreas contábil, fiscal, trabalhista e tributári...

Business Services5.0Published
contitec.net.br

Wakefield & Associates

knight🇺🇸 US3 groups: akira, coinbasecartel
Nov 30, 2023

www.wakeassoc.com We have over 400GB of data from Wakefield and AssociatesThey refuse to come to discuss a deal with us. If you do not contact us soon all ...

Financial Services5.0Published
wakeassoc.com

Studio D.EL.LA. SRL

knight🇮🇹 IT
Nov 20, 2023

http://www.studiodella.it/150GB STEALED.A Trieste si trova lo studio D.EL.LA, specializzato in servizi di elaborazione dati, paghe e contributi e consulenza del...

Technology5.0Published
silvi.it

Barnett Millworks

knight
Nov 20, 2023

Your network has been locked by us.350GB of data has been downloaded to our servers.We're waiting for you in the chat room to negotiate.

Manufacturing1.0Published

Dreyfuss Williams & Associates Co., LPA

knight🇺🇸 US
Nov 20, 2023

Domain:www.dreyfuss.com300GB+ of data has been downloaded from Dreyfuss100k+ documents containing information on USA residents including SSN DOB.We wait for you...

Business Services7.0Published
youngbloodtylerassociates.com

US Claims Solutions

knight
Nov 1, 2023

Over 600GB of sensitive data were stolen from there.  US CLAIMS SOLUTIONS Mankin Custom Motors, LLC   https://www. mcmtx.comFF&O a subsidiary...

Financial Services7.0Published
usclaimssolutions.com

Mario de Cecco - Workwear & Corporate Wear IT

knight
Oct 31, 2023

https://www.dececco.net/50 Anni di successi di famigliaLa nostra storia è un emozionante viaggio attraverso più di cinque decenni di attività: un viaggio all’in...

Consumer Services1.0Published
dececco.net

Kinesis Film Srl

knight🇮🇹 IT
Oct 31, 2023

https://www.kinesisfilm.it/Kinesis srl è una società di produzione indipendente fondata a Roma nel 2010 da professionisti provenienti da differenti settori del ...

Consumer Services1.0Published
kinesisfilm.it

BMW Munique Motors

knight🇧🇷 BR
Oct 31, 2023

https://www.bmwmuniquemotors.com.br/Bem-vindo à página oficial da Munique Motors. Sua concessionária autorizada BMW para todo Estado de Rondônia.Além da comerci...

Consumer Services1.0Published
bmwmuniquemotors.com.br

Benefit Management

knight🇺🇸 US
Oct 31, 2023

As a result of our hack attack the network has been encrypted and over 250GB of sensitive data were stolen from Benefit Management. Those data includes few empl...

Business Services6.0Published
webpayee.com

Intellipop Fiber Internet

knight🇺🇸 US
Oct 31, 2023

Intellipop is a locally owned Internet Service Provider located in Payson, UT. We have been in service since 2014 and provide local residents a better, local al...

Telecommunication1.0Published
intellipop.com

il Centro

knight🇮🇹 IT
Oct 31, 2023

https://www.ilcentro.it/Il Centro è il quotidiano d'Abruzzo. Il suo primo numero uscì il 3 luglio 1986.The newspaper was part of Gruppo Editoriale L'Espresso. I...

Consumer Services2.0Published
ilcentro.it

Emmea Srl

knight🇮🇹 IT
Oct 31, 2023

https://www.emmeasrl.it/Emmea srl, nasce nel 1999 con l’intenzione di garantire un servizio competente, professionale e di alto profilo, grazie ad una esperienz...

Transportation/Logistics1.0Published
emmeasrl.it

Michels Markisen GmbH

knight🇩🇪 DE
Oct 31, 2023

Michels Markisen SaunabauAnders sein – Handwerk, Menschen, Ideen im Fokus – das ist das wofür wir seit 50 Jahren stehen.Mit einem starken Team, das unser Untern...

Manufacturing1.0Published
bilstein.com

Pontifica Universidad Católica de Chile

knight🇨🇱 CL
Oct 31, 2023

https://www.uc.cl/ (ALL DATA ENCRYPTED)La Pontificia Universidad Católica de Chile es una universidad pontificia ubicada en la ciudad de Santiago, Chile, fundad...

Education1.0Published
uc.cl

Veneto Transportes

knight🇧🇷 BR
Oct 31, 2023

http://www.venetolog.com.br/A Vêneto Transportes é uma operadora logística que, desde 1987, tem como área de atuação a prestação de serviços em transportes, mov...

Transportation/Logistics1.0Published
venetolog.com.br

Hospital Italiano de Buenos Aires

knight🇦🇷 AR
Oct 13, 2023

El Hospital Italiano de Buenos Aires es una asociación civil sin fines de lucro dedicada al cuidado integral de la salud. Desde 1853, brinda asistencia médica, ...

Healthcare2.0Published
hospitalitaliano.org.ar

AKBASOGLU HOLDING Trans KA

knight
Oct 13, 2023

This blog will be published in 3 days and all data will be made publicly available and attacks will be made on AKBASOGLU HOLDING Trans KA customers.

Transportation/Logistics1.0Published

National Health Mission. Department of Health & Family Welfare, Govt. of U.P

knight🇮🇳 IN
Oct 10, 2023

Patient status and Data Website: https://upnrhm.gov.in/Home/Index

Healthcare7.0Published
upnrhm.gov.in

National Health Mission. Department of Heath & Family Welfare, Govt. of U.P

knight🇮🇳 IN
Oct 10, 2023

Patient status and Data Website: https://upnrhm.gov.in/Home/Index

Healthcare7.0Published
upnrhm.gov.in

Guhring was hacked. Thousands of confidential files stolen.

knight
Oct 9, 2023

This blog will be published 72 hours after the attack, all data will be posted publicly unless Guhring does not contact us to protect its data or ignores this m...

Manufacturing1.0Published

GDL Logística Integrada S.A

knight🇧🇷 BR
Oct 3, 2023

Who is GDL Logistica Integrada S.A? Rodovia Governador Mario Covas, 882 PADRE MATHIAS CARIACICA - ES, BRAZIL CEP: 29157-100 Website: https://www.gdllogistica.c...

Transportation/Logistics1.0Published
gdllogistica.com.br

Garn Mason Orthodontics was hacked. All insurance and personal data of customers was stole

knight
Sep 29, 2023

Garn Mason Orthodontics was hacked. All insurance and personal data of customers was stolen

Healthcare5.0Published

Nusmiles Hospital

knight
Sep 25, 2023

https://www.nusmiles.com/ nusmiles is a general dentist specializing in dental procedures and services in Takoma Park, MD. Michele Dozier, DDS is located in Tak...

Healthcare1.0Published
nusmiles.com

Hacketts printing services

knight
Sep 19, 2023

As a family business, we have thrived and adapted over the last 68 years, and now boast over 500 years’ combined design and printing experience, knowledge and e...

Business Services1.0Published

Dustin J Will LCC / Dustin J Will Sole MBR

knight
Sep 18, 2023

Dustin J Will LCC / Dustin J Will Sole MBR 47-49497xx Wealth Strategies and Employee Benefit Advisors Dustin Will is a Financial Representative of Benefit Mana...

Financial Services5.0Published

Lopez & Associates Inc

knight
Sep 18, 2023

Lopez & Associates Inc. photocopy service remains one of California's leaders in the photocopy service industry. Our company has positioned itself to respond t...

Business Services1.0Published

etsi.uy

knight🇺🇾 UY
Sep 14, 2023

Victim refuses to cooperate in negotiations and make efforts to pay and as such data will be posted on the 2023-09-25

1.0Published
etsi.uy

Benefit Management INC

knight🇺🇸 US
Sep 13, 2023

Before start running the encryption to your servers and computers , we upload your backups and delete from the backups from iDrive. We have collected more sen...

Financial Services5.0Published
newtonandassociates.com

Tanachira Group

knight
Sep 13, 2023

Tanachira's mission is to inspire and celebrate designs of world famous lifestyle brands with South East Asian consumers via its two core strengths - the execut...

Consumer Services1.0Published

Morgan Smith Industries LLC

knight🇺🇸 US
Sep 12, 2023

We are a premier, custom Architectural Millwork, Casework, and Contract Furniture manufacturer located in South Central Kentucky. Using cutting edge technologie...

Manufacturing1.0Published
semsandspecials.com

Decarie Motors Inc

knight
Sep 12, 2023

In 2016, Decarie Motors celebrated its 70th anniversary with the grand opening of its brand-new, state-of-the-art facilities for Aston Martin Montreal, Bentley ...

Consumer Services2.0Published
decarie.com

Solano-Napa Pet Emergency Clinic

knight
Sep 6, 2023

Solano-Napa Pet Emergency Clinic is Animal hospital in Fairfield, California.

Consumer Services1.0Published

important information(Knight)

knight2 groups: cyclops
Jul 26, 2023

We are about to close the old panel and blog and in version 2. 0 we renamed it Knight. We are releasing the new panel and program this week.We are still recruit...

1.0Published
week.we

Pechexport

knight🇨🇳 CN2 groups: cyclops
Jul 23, 2023

Infrastructure and logistics Pêchexport is located in Majunga on a surface of 8400 m². Our premises include offices, a factory, a laboratory, storage equipment ...

Agriculture and Food Production1.0Published
pechexport.mg

Infrastructure

No sites tracked