Back to Victim Disclosures
Do they pay?
malasransomware group
Feb 22, 2026
Feb 22, 2026
Sometimes. It seems to work about as well as any other ransomware🔐. While some businessmen👨💼 are more willing to play along😻, for the most part they’re doing the same calculation🔢 as with any other ransomware🔐. They weigh⚖ the cost of decrypting🔓 their files📁 against the cost of restoring from backups and losing some data🗒🔥. They just want to keep as much profits💰 as possible, it doesn’t matter at all to them whether they are sending money💸 to criminals or to a charity of their own choice😕. So we start this blog🖊 so they can also weigh⚖ the cost of people looking🔎 through their emails📧 and dealing with regulators about their data breach😮.
Leak Page Screenshot

Organization Details
Organization
Do they pay?
Leak Data
Published
Feb 22, 2026
Discovered
Feb 22, 2026
Data Types
FinancialEmployee records
GDPR
Leak URL
http://malas2urovbyyavjzaezkt5ohljvyd5lt7vv7mnsgbf2y4bwlh72doqd.onion Site OfflineLast scanned 22h ago
Threat Group
malas
ransomware group
View full group profile →
Quick Facts
PublishedFeb 22, 2026