Back to Threat Groups

netrunner

ransomware group

NetRunner is a ransomware group active from at least 2025 targeting diverse sectors including healthcare, telecommunicat

Victims
9
records
First Discovered
Apr 3, 2026
victim
Last Discovered
Apr 4, 2026
victim
Inactive Since
136
days
Countries
6
hit
Avg Discount
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
9
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Infrastructure

auto-discovered
ONLINE
http://netrunnlekx5rsfc7l3k3wbczr5m7rbdlgmf6aeyvgo5rsakki6ljjqd.onion

2756ms

1d ago

leak site
ONLINE
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/

1392ms

21h ago

leak site
ONLINE
http://netrunrsb3bivj5gnwajzxlig5qkteb6edgthxj7fmsvhkzxtwfxwaad.onion

1520ms

2d ago