netrunner
ACTIVEransomware group
NetRunner is a ransomware group active from at least 2025 targeting diverse sectors including healthcare, telecommunicat
Group Activity
Last 12 monthsVictims (12)
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates
www.magopsa.com Fairfax, Virginia, USA N/A N/A N/A Locked, Exfiltrated
Precon Marine
preconmarine.com
Main Place Mall
www.mainplace.com.my Subang Jaya, Malaysia N/A N/A N/A Locked, Exfiltrated
jifco.co
jifco.co www.iffco.in www.jpmc.com.jo
Access Data
eoyonehap.com
eoyonehap.com eoyoneh.com
Jordan India Fertilizer Company
jifco.co www.iffco.in www.jpmc.com.jo Amman, Jordan ASE:JOPH 467M 368 Locked, Exfiltrated
Harman Fitness
crunchfitness.com Chatsworth, California, USA N/A 67M 300+ Locked, Exfiltrated
Nippon Medical School Musashi Kosugi Hospital
www.nms.ac.jp/kosugi-h Kosugimachi, Kawasaki, Japan N/A 100M 902 Locked, Exfiltrated
Shiraume Hospital
www.shiraume.or.jp Iwata, Shizuoka, Japan N/A N/A N/A Locked, Exfiltrated
GEG Telecomunicazioni
geg.it Monza, Lombardy, Italy N/A N/A N/A Locked, Exfiltrated
Seoyon E-Hwa Summit
seoyonehap.com seoyoneh.com India South Korea KRX:200880 120M 1500 Locked, Exfiltrated
Infrastructure
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/3886ms
4h ago
http://netrunnlekx5rsfc7l3k3wbczr5m7rbdlgmf6aeyvgo5rsakki6ljjqd.onion1973ms
17m ago
http://netrunrsb3bivj5gnwajzxlig5qkteb6edgthxj7fmsvhkzxtwfxwaad.onion/4729ms
17m ago