Back to Threat Groups

ranion

INACTIVERansomware-as-a-Service

ransomware group

Ranion is a ransomware-as-a-service operation first observed in April 2017 that offers a low-barrier, pay-upfront model

Victims
0
records
First Discovered
—
victim
Last Discovered
Sep 20, 2026
victim
Inactive Since
—
—
Countries
0
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026
Nov
2026

Victims (0)

No victims recorded

Infrastructure

leak site
OFFLINE

unreachable

http://ranionv3j2o7wrn3um6de33eccbchhg32mkgnnoi72enkpp7jc25h3ad.onion/

8578ms

6d ago

leak site
OFFLINE

unreachable

http://ssg3qvvuilseciagm4nixjqu3rsiheny5lifjnwt6o5ann64iocy64ad.onion/

5081ms

6d ago