Back to Threat Groups

redalert

INACTIVE

ransomware group

RedAlert (also called N13V) is a ransomware group first observed in July 2022 that targets both Windows and Linux VMware

Victims
5
records
First Discovered
Jul 14, 2022
victim
Last Discovered
Sep 13, 2022
victim
Inactive Since
1,478
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026

Victims (5)

groupg4.com

redalert
Sep 13, 2022
Business Services1.0Published
groupg4.com

coarc.org

redalert
Jul 28, 2022
Professional Services1.0Published
coarc.org

keystonelegal.co.uk

redalert🇬🇧 GB
Jul 20, 2022
Business Services1.0Published
keystonelegal.co.uk

vahanen.com

redalert
Jul 15, 2022
1.0Published
vahanen.com

syredis.fr

redalert🇫🇷 FR
Jul 14, 2022
Technology1.0Published
syredis.fr

Infrastructure

leak site
OFFLINE
http://ybxtfftwy2iwfqjy7fvvcrt5sd55fx3sk2yuztbx3y2dxb4dvqdhsiid.onion

never crawled

leak site
OFFLINE

unreachable

http://blog2hkbm6gogpv2b3uytzi3bj5d5zmc4asbybumjkhuqhas355janyd.onion/

4685ms

7d ago

leak site
OFFLINE

unreachable

http://ocsmkribkmoij3uhvhxlpxlpebqhzo5uingee7mvebnv57jqya745uyd.onion

3731ms

2d ago

leak site
OFFLINE

unreachable

http://gwvueqclwkz3h7u75cks2wmrwymg3qemfyoyqs7vexkx7lhlteagmsyd.onion/

3159ms

4d ago

leak site
OFFLINE

unreachable

http://qrcxhs4x2n4a65rk3zbwm5hu6475bi4w2mdjhfmusovnjc6hc6qcv3ad.onion

8964ms

2d ago

leak site
OFFLINE

unreachable

http://je2yizds7r4uidk6uixfxwjj5w7or2agit4aj66l4lrhdbrvr3lsymid.onion

2385ms

4d ago