Back to Threat Groups

netrunner

ACTIVE

ransomware group

NetRunner is a ransomware group active from at least 2025 targeting diverse sectors including healthcare, telecommunicat

Victims
10
records
First Discovered
Apr 3, 2026
victim
Last Discovered
Oct 2, 2026
victim
Inactive Since
0
days
Countries
7
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
9
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
1
Oct
2026

Infrastructure

leak site
ONLINE
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/

1088ms

26m ago

auto-discovered
ONLINE
http://netrunnlekx5rsfc7l3k3wbczr5m7rbdlgmf6aeyvgo5rsakki6ljjqd.onion

1566ms

26m ago

leak site
ONLINE
http://netrunrsb3bivj5gnwajzxlig5qkteb6edgthxj7fmsvhkzxtwfxwaad.onion/

865ms

7h ago