Back to Threat Groups

rancoz

INACTIVE

ransomware group

Rancoz is a Windows-targeting ransomware strain first observed in November 2022 that appends the ".rec_rans" extension t

Victims
6
records
First Discovered
May 5, 2023
victim
Last Discovered
Sep 3, 2023
victim
Inactive Since
1,122
days
Countries
0
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026

Victims (6)

DDB Unlimited (ddbunlimited.com)

rancoz
Sep 3, 2023

Manufactures

Manufacturing1.0Published
ddbunlimited.com

Rick Ramos Law (rickramoslaw.com)

rancoz
Sep 3, 2023

Legal Services industry

Business Services3.0Published
rickramoslaw.com

Industrial Heat Transfer (iht-inc.com)

rancoz
Jul 7, 2023

Custom Heat Exchanger Manufacturer

Manufacturing1.0Published
iht-inc.com

Air Comfort (aircomfort.ac)

rancoz
Jun 14, 2023

Construction industry

Construction1.0Published
aircomfort.ac

RIC Electronics (ricelectronics.com)

rancoz
May 5, 2023

Electrical Equipment Manufacturing

Manufacturing1.0Published
ricelectronics.com

TrueLogic (truelogiccompany.com)

rancoz
May 5, 2023

Software and services company

Technology1.0Published
truelogiccompany.com

Infrastructure

leak site
OFFLINE

unreachable

http://ze677xuzard4lx4iul2yzf5ks4gqqzoulgj5u4n5n4bbbsxjbfr7eayd.onion

8969ms

12h ago