Back to Threat Groups

mamona

INACTIVERansomware-as-a-Service

ransomware group

Mamona was a short-lived ransomware rebrand attempted by the operator behind BlackLock RaaS in March 2025 that failed be

Victims
0
records
First Discovered
Mar 12, 2025
victim
Last Discovered
Jul 12, 2026
victim
Inactive Since
—
—
Countries
0
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Victims (0)

No victims recorded

Infrastructure

leak site
OFFLINE

unreachable

http://owt3kwkxod2pvxlv3uljzskfhebhrhoedrh5gqrxyyd6rrco4frzj5ad.onion/

8668ms

3d ago

leak site
OFFLINE

unreachable

http://bdhjur3agrogoxvwobbzpptkxhyewnjrhzqj4ug2dyfhf3dopyvvurid.onion/

3260ms

6d ago