Back to Victim Disclosures

Do they pay?

malasransomware group
Feb 22, 2026

Feb 22, 2026

Sometimes. It seems to work about as well as any other ransomware🔐. While some businessmen👨‍💼 are more willing to play along😻, for the most part they’re doing the same calculation🔢 as with any other ransomware🔐. They weigh⚖ the cost of decrypting🔓 their files📁 against the cost of restoring from backups and losing some data🗒🔥. They just want to keep as much profits💰 as possible, it doesn’t matter at all to them whether they are sending money💸 to criminals or to a charity of their own choice😕. So we start this blog🖊 so they can also weigh⚖ the cost of people looking🔎 through their emails📧 and dealing with regulators about their data breach😮.

Leak Page Screenshot
Screenshot of Do they pay? leak page

Organization Details

Organization

Do they pay?

Leak Data

Published

Feb 22, 2026

Discovered

Feb 22, 2026

Data Types
FinancialEmployee records
GDPR
Leak URL
http://malas2urovbyyavjzaezkt5ohljvyd5lt7vv7mnsgbf2y4bwlh72doqd.onion
Site OfflineLast scanned 22h ago