Back to Threat Groups

redalert

INACTIVE

ransomware group

RedAlert (also called N13V) is a ransomware group first observed in July 2022 that targets both Windows and Linux VMware

Victims
5
records
First Discovered
Jul 14, 2022
victim
Last Discovered
Sep 13, 2022
victim
Inactive Since
1,432
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Victims (5)

groupg4.com

redalert
Sep 13, 2022
Business Services1.0Published
groupg4.com

coarc.org

redalert
Jul 28, 2022
1.0Published
coarc.org

keystonelegal.co.uk

redalert🇬🇧 GB
Jul 20, 2022
Business Services1.0Published
keystonelegal.co.uk

vahanen.com

redalert
Jul 15, 2022
1.0Published
vahanen.com

syredis.fr

redalert🇫🇷 FR
Jul 14, 2022
Technology1.0Published
syredis.fr

Infrastructure

leak site
OFFLINE

unreachable

http://gwvueqclwkz3h7u75cks2wmrwymg3qemfyoyqs7vexkx7lhlteagmsyd.onion/

6087ms

5d ago

leak site
OFFLINE

unreachable

http://blog2hkbm6gogpv2b3uytzi3bj5d5zmc4asbybumjkhuqhas355janyd.onion/

2896ms

5d ago

leak site
OFFLINE

unreachable

http://ocsmkribkmoij3uhvhxlpxlpebqhzo5uingee7mvebnv57jqya745uyd.onion

2892ms

10d ago

leak site
OFFLINE
http://qrcxhs4x2n4a65rk3zbwm5hu6475bi4w2mdjhfmusovnjc6hc6qcv3ad.onion

never crawled