Back to Threat Groups

yurei

INACTIVE

ransomware group

Yurei is a ransomware group first observed in September 2025 whose payload is a minimally modified fork of the open-sour

Victims
1
records
First Discovered
Sep 9, 2025
victim
Last Discovered
Sep 9, 2025
victim
Inactive Since
385
days
Countries
1
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026

Victims (1)

noblecorp.net

yurei🇨🇭 CH
Sep 9, 2025

Noble Corporation is a leading industrial insulation and materials supply company based in India, renowned for its expertise, innovation, and dedication to qual...

Energy1.0Published
noblecorp.net

Infrastructure

leak site
OFFLINE

unreachable

http://fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion/

8143ms

1d ago