Back to Threat Groups

ransomexx

ACTIVE

ransomware group

🇷🇺Russia

RansomExx (also known as Defray777) is a ransomware family that targeted multiple high-profile organizations including Konica Minolta, Tyler Technologies, and the Brazilian court system (STJ). The group is linked by researchers to the Russia-based Evil Corp cybercriminal organization and has operated as a targeted big-game hunting operation since at least 2018. RansomExx deploys both Windows and Linux variants of its ransomware.

Victims
96
records
First Discovered
May 14, 2020
victim
Last Discovered
Jun 20, 2026
victim
Inactive Since
6
days
Countries
25
hit
Avg Discount
no settlements

Group Activity

Last 12 months
Jul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
7
Feb
2026
3
Mar
2026
3
Apr
2026
May
2026
2
Jun
2026

Victims (96)

Go2Joy (go2joy.vn)

ransomexx
6d ago

We have released the complete database of Go2Joy, Vietnam’s leading platform for hourly and short-stay hotel bookings.

Published
go2joy.vn

Go2Joy

ransomexx🇻🇳 VN
6d ago

We have released the complete database of Go2Joy, Vietnam’s leading platform for hourly and short-stay hotel bookings.

Hospitality and TourismPublished
go2joy.vn

SOGO Auction

ransomexx🇯🇵 JP
Apr 17, 2026

SOGO Auction - 951MB leaked. SOGO Auction is a prominent Japan-based, specialized auctioneer with over 30 years of experience in trading used construction machi...

Business Services5.0Published
sogocorporation.com

Soluzioni Infrastrutturali Telefoniche ed Elettriche

ransomexx
Apr 17, 2026
Published

GoTip

ransomexx🇯🇵 JP
Apr 16, 2026

GoTip - 1.13GB leaked. Gotip.jp is a Japanese live-streaming enhancement tool that connects digital tips (donations) to physical Bluetooth-enabled devices. It a...

Business Services3.0Published
gotip.jp

Indura S.A.

ransomexx🇨🇱 CL
Mar 27, 2026
ManufacturingPublished
armoniaips.com

Universal Assistance

ransomexx🇺🇸 US
Mar 27, 2026
OtherPublished

RansomEXX v2

ransomexx
Mar 7, 2026
Published

Groupe Atlantic

ransomexx🇫🇷 FR
Feb 22, 2026
Consumer ServicesPublished
sarlalliancevape.com

Embraer S.A.

ransomexx
Feb 22, 2026
Published

Walsin Tech

ransomexx
Feb 22, 2026
Published

Inchcape Australia

ransomexx
Feb 22, 2026
Published

City West Housing Trust

ransomexx
Feb 22, 2026
Published

St. James Parish Credit Union

ransomexx
Feb 22, 2026
Published

CalAmp

ransomexx
Feb 22, 2026
Published

ADDA (

ransomexx🇮🇳 IN
Mar 7, 2025

ADDA is SaaS for Residential Community Management. 12 millions residents, visitors and stuff records leaked. Date: Tags: #usa #uae #india

Technology3.0Published
adda.io

Grupo Vargas

ransomexx🇻🇪 VE
Mar 4, 2025

Laboratorios Vargas stands out in the pharmaceutical sector, not just for its longevity but also through continuous innovation and dedication toward creating hi...

Healthcare1.0Published
grupovargas.com

Lakeshore Title Agency

ransomexx🇺🇸 US
Mar 4, 2025

Lakeshore Title Agency has closed over $100 million in commercial transactions and over $700 million in residential refinances and purchases. Leak size: 341GB. ...

Financial Services5.0Published
lstitle.com

Makesworth Accountants

ransomexx🇬🇧 GB
Mar 4, 2025

Makesworth Accountants is multi-award-winning accountancy practice of a chartered accountant, tax and business advisers. Leak size: 176.4GB. Date: Tags: #uk

Financial Services2.0Published
makesworth.co.uk

Retemex

ransomexx🇲🇽 MX
Sep 14, 2024

Retemex is a virtual mobile operator in Mexico, operating on the country's 4.5G LTE network. 4,883 client records exposed in a breach, including passwords store...

Telecommunication6.0Published
retemex.mx

Brontoo Technology Solutions

ransomexx🇮🇳 IN
Aug 10, 2024

Brontoo Technology Solutions India Private Limited is an IT services and consulting company based in India. 146123 users data, 3.6GB at all. Date: Tags: #india

Technology5.0Published
brontoo.com

nursing.com

ransomexx🇺🇸 US
Aug 3, 2024

NURSING.com is an all-in-one online platform designed to help nursing students succeed in their studies and pass the NCLEX® exam with confidence. 568221 users d...

Healthcare4.0Published
nursing.com

Planet Group International

ransomexx🇺🇸 US
Jul 26, 2024

Planet Group International is a multinational corporation specializing in innovative technology solutions and consulting services. Leak size: 4.9GB. Date: Tags:...

Technology1.0Published
planetgroupint.com

LITEON

ransomexx🇹🇼 TW
Jul 26, 2024

LITEON Technology Corporation, based in Taiwan, is a leading company in the electronics industry known for its diverse range of products. Leak size: 142.7 GB. D...

Technology1.0Published
liteon.com

Wagner-Meinert

ransomexx
Jul 12, 2024

Wagner-Meinert is a company that specializes in industrial refrigeration, food process systems, and mechanical contracting. Leak size: 685.3GB. Date: Tags: #usa

Business Services1.0Published

United Carton Industries Company

ransomexx🇸🇦 SA
Apr 22, 2024

United Carton Industries Company (UCIC) is a leading packaging solutions provider based in Saudi Arabia Leaked data size: 26.37GB.

Manufacturing1.0Published
ucic.com.sa

Ruwac Industrial Vacuums

ransomexx🇺🇸 US
Apr 22, 2024

Ruwac Industrial Vacuums is a leading manufacturer of industrial vacuum cleaners and vacuum systems designed for specialized cleaning applications in various in...

Manufacturing1.0Published
ruwac.com

Diagnostica Stago

ransomexx🇫🇷 FR
Apr 22, 2024

Diagnostica Stago is a global leader in the field of in-vitro diagnostics, specializing in hemostasis and thrombosis.Leaked data size: 423MB.

Healthcare1.0Published
stago.fr

Bombardier Recreational Products

ransomexx🇨🇦 CA
Apr 22, 2024

Bombardier Recreational Products (BRP) is a Canadian company that designs, manufactures, distributes, and markets motorized recreational vehicles and powersport...

Manufacturing1.0Published
brp.com

Consorci Sanitari Integral

ransomexx🇪🇸 ES
Apr 22, 2024

Consorci Sanitari Integral (CSI) is a healthcare consortium based in Catalonia, Spain Leaked data size: 52.47GB.

Healthcare6.0Published
csi.cat

Badan Urusan Logistik

ransomexx🇮🇩 ID
Apr 22, 2024

BULOG, or Badan Urusan Logistik, is the state-owned logistics agency of Indonesia Leaked data size: 12.77GB.

Government3.0Published

Jacobs Farm / Del Cabo

ransomexx🇺🇸 US
Apr 22, 2024

Jacobs Farm / Del Cabo is an organic farming company known for its commitment to sustainable agriculture and ethical business practices. Leaked data size: 399GB...

Agriculture and Food Production1.0Published
delcabo.com

DVision Architecture

ransomexx🇮🇹 IT
Apr 22, 2024

Dvision Architecture is a global architecture and design firm known for its innovative approach to architectural projects. Leaked data size: 110GB.

Business Services2.0Published
dvisionarchitecture.com

Telecommunications Services of Trinidad and Tobago

ransomexx🇹🇹 TT
Apr 22, 2024

Telecommunications Services of Trinidad and Tobago (TSTT) is the primary telecommunications provider in the twin-island nation of Trinidad and Tobago. Leaked da...

Business Services1.0Published
tstt.co.tt

Ministry of Defense of Peru

ransomexx🇵🇪 PE
Apr 22, 2024

The Peruvian Ministry of Defense (Ministerio de Defensa del Perú) is the government agency responsible for overseeing the defense and security affairs of Peru. ...

Government1.0Published

Asteco

ransomexx🇦🇪 AE
Apr 22, 2024

Asteco is a real estate services firm based in the United Arab Emirates (UAE), with its headquarters in Dubai. It offers a wide range of real estate services in...

Business Services5.0Published
asteco.com

Kenya Airways

ransomexx🇰🇪 KE
Dec 30, 2023

Kenya Airways Ltd., more commonly known as Kenya Airways, is the flag carrier airline of Kenya. The company was founded in 1977, after the dissolution of East A...

Transportation/Logistics1.0Published
kenya-airways.com

AlJaber Engineering

ransomexx🇶🇦 QA
Nov 26, 2023

AlJaber Engineering (JEC) is a leading general contractor based in the State of Qatar.

Construction1.0Published
jec.com.qa

Admilla ELAP

ransomexx
Nov 17, 2023

Elap (formerly Admilia) offers its expertise and support throughout the implementation of your budget and accounting solution. Huge clients, financial documents...

Business Services6.0Published
admilia.com

Telecommunications Services of Trinidad and Tobago (tstt.co.tt)

ransomexx🇹🇹 TT
Oct 27, 2023

tstt.co.tt and bmobile.co.tt. 4293368 customer's lines, ID scans, gitlab projects, db dumps.

Telecommunication7.0Published
tstt.co.tt

DVA - DVision Architecture

ransomexx🇮🇹 IT
Jul 1, 2023

Dalla digitalizzazione del progetto alla realizzazione di prototipi costruttivi: l’attività di DVA spazia dal concept di un intervento, all’organizzazione logis...

Business Services1.0Published
dvisionarchitecture.com

Jacobs Farm

ransomexx🇺🇸 US
Jun 24, 2023

Jacobs Farm was founded in 1980 as a small organic family farm dedicated to growing fresh, high quality, delicious food without damaging the environment.

Agriculture and Food Production2.0Published
jacobsfarmdelcabo.com

Bettuzzi And Partners

ransomexx
Mar 2, 2023

Lo Studio BETTUZZI & PARTNERS - Dottori Commercialisti è stato fondato dal dott. Alvaro Bettuzzi, nell'anno 2005, dopo aver maturato significative esperienze ne...

Business Services1.0Published

BULOG

ransomexx🇮🇩 ID
Feb 22, 2023

BULOG adalah perusahaan umum milik negara yang bergerak di bidang logistik pangan.

Agriculture and Food Production1.0Published
bulog.co.id

REC Silicon

ransomexx
Dec 11, 2022

REC Silicon is a global leader in silane-based, high-purity silicon materials.

Energy2.0Published

Unimed Belem

ransomexx
Oct 19, 2022

A Unimed é a maior realidade cooperativista na área da saúde em todo o mundo e também a maior rede de assistência médica do Brasil, presente em 83% do territóri...

Healthcare1.0Published

Consorci Sanitari Integral & Geseme

ransomexx🇪🇸 ES
Oct 11, 2022

El Consorci Sanitari Integral (CSI) és un ens públic de serveis sanitaris i socials que neix l'any 2000 assumint els antics hospitals de la Creu Roja en la prov...

Healthcare3.0Published
csi.cat

Ferrari

ransomexx
Oct 2, 2022

Some internal documents, datasheets, repair manuals, etc.

Manufacturing3.0Published

Bombardier Recreational Products (BRP) - SOURCE CODES

ransomexx
Oct 1, 2022

Here are some codes from BRP's repos. atgk.brp.ApprenticeShopAPI, atgk.brp.ApprenticeShopMobileAppBackend, atgk.brp.Tools.RemoteConnectionManager, BRP - Usine 9...

Manufacturing3.0Published
atgk.brp.apprenticeshopapi

Fundo Nacional de Desenvolvimento da Educação

ransomexx🇧🇷 BR
Sep 3, 2022

The National Fund for Educational Development (FNDE) is a federal agency under the Ministry of Education, responsible for implementing programs nationwide, incl...

Education1.0Published

Infrastructure

leak site
ONLINE
http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion

419ms

5d ago

leak_site
ONLINE
http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/

431ms

3d ago