Back to Threat Groups

yurei

INACTIVE

ransomware group

Yurei is a ransomware group first observed in September 2025 whose payload is a minimally modified fork of the open-sour

Victims
1
records
First Discovered
Sep 9, 2025
victim
Last Discovered
Sep 9, 2025
victim
Inactive Since
341
days
Countries
1
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
1
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Victims (1)

noblecorp.net

yurei🇨🇭 CH
Sep 9, 2025

Noble Corporation is a leading industrial insulation and materials supply company based in India, renowned for its expertise, innovation, and dedication to qual...

Energy1.0Published
noblecorp.net

Infrastructure

leak site
OFFLINE

unreachable

http://fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion/

2194ms

4d ago