Back to Threat Groups

yurei

INACTIVE

ransomware group

Yurei is a ransomware group first observed in September 2025 whose payload is a minimally modified fork of the open-sour

Victims
1
records
First Discovered
Sep 9, 2025
victim
Last Discovered
Sep 9, 2025
victim
Inactive Since
431
days
Countries
1
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026
Nov
2026

Victims (1)

noblecorp.net

yurei🇨🇭 CH
Sep 9, 2025

Noble Corporation is a leading industrial insulation and materials supply company based in India, renowned for its expertise, innovation, and dedication to qual...

Energy1.0Published
noblecorp.net

Infrastructure

leak site
OFFLINE

unreachable

http://fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion/

4713ms

6d ago