Ransomware Group intelligence

Apt73

Active

Track Apt73 with 174 published victims and 12 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 174 Known published victims in this dataset
First discovered 2024-04-22 Earliest victim discovery date
Last discovered 2026-07-24 Latest victim discovery date
Inactive since 50 days Days since the latest known victim
Top country United States 23 victims
Known locations 12 Leak or negotiation infrastructure tracked

Overview

Apt73 is tracked by Breach House as a ransomware group with 174 published victims.

United States is currently the most targeted country in this dataset.

12 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 25 35.7%
  • Pending 45 64.3%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (12)

    Label Type Availability Links
    Leak location 11 Onion service Up checked 5h ago bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion
    Leak location 10 Onion service Up checked 5h ago bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion
    Leak location 8 Onion service Up checked 5h ago basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
    Leak location 9 Onion service Up checked 5h ago basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
    Leak location 7 Onion service Up checked 5h ago basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion
    Leak location 6 Onion service Up checked 5h ago basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion
    Leak location 5 Onion service Up checked 5h ago bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion
    Leak location 12 Onion service Down checked 5h ago qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onion
    Leak location 4 Onion service Down checked 5h ago apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onion
    Leak location 3 Onion service Down checked 5h ago fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion
    Leak location 2 Onion service Down checked 5h ago wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion
    Leak location 1 Web location Down checked 5h ago eraleignews.com

    Top Activity Sectors (17)

    Victims (174)

    Search, filter and paginate the victim timeline for Apt73. Showing 1–100 of 174.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware metrabyte.cloud id30819 View details Germany IT leaked
    Ransomware metrabyte.cloud id30819 View details Germany IT leaked
    Ransomware dgcement.com id30288 View details Algeria Manufacturing / Engineering pending
    Ransomware dgcement.com id30288 View details Algeria Manufacturing / Engineering pending
    Ransomware azarestan.com id30286 View details Iran, Islamic Republic of Other pending
    Ransomware azarestan.com id30286 View details Iran, Islamic Republic of Other pending
    Ransomware vicentetrapani.com id30283 View details Argentina Other pending
    Ransomware vicentetrapani.com id30283 View details Argentina Other pending
    Ransomware westernint.com id30281 View details United States Finance / Legal / Insurance pending
    Ransomware westernint.com id30281 View details United States Finance / Legal / Insurance pending
    Ransomware aydeniz.com id30243 View details Türkiye Transportation / Travel / Logistics pending
    Ransomware aydeniz.com id30243 View details Türkiye Transportation / Travel / Logistics pending
    Ransomware flazio.com id30235 View details Brazil IT pending
    Ransomware flazio.com id30235 View details Brazil IT pending
    Ransomware holidaypalace.com id30236 View details Macao Hospitality / Food & Beverage / Tourism pending
    Ransomware holidaypalace.com id30236 View details Macao Hospitality / Food & Beverage / Tourism pending
    Ransomware ritavo.com id30228 View details Austria Retail / E-commerce pending
    Ransomware ritavo.com id30228 View details Austria Retail / E-commerce pending
    Ransomware kliknklik.com id29983 View details Indonesia Retail / E-commerce pending
    Ransomware kliknklik.com id29983 View details Indonesia Retail / E-commerce pending
    Ransomware gov.br id29984 View details Brazil Public Sector pending
    Ransomware gov.br id29984 View details Brazil Public Sector pending
    Ransomware viennaairport.com id29991 View details Austria pending
    Ransomware viennaairport.com id29991 View details Austria pending
    Ransomware smarty.arpinet.am id29577 View details Armenia IT pending
    Ransomware elections.mia.gov.am from WOLVES OF TURAN id29569 View details Armenia Public Sector pending
    Ransomware tkgm.gov.tr id29316 View details Türkiye Public Sector pending
    Ransomware minsa.com.mx id29317 View details Mexico Other
    Ransomware tvnmedia.com id29309 View details Poland Communication / Marketing
    Ransomware grupopetersen.com.ar id29302 View details Argentina Manufacturing / Engineering
    Ransomware narit.or.th id29303 View details Thailand Other pending
    Ransomware alkaloid.com.mk id29305 View details North Macedonia Healthcare / Pharma leaked
    Ransomware ungererandcompany.com id29299 View details Germany Manufacturing / Engineering
    Ransomware trifecta.com id28519 View details United States Retail / E-commerce
    Ransomware credio.eu id28520 View details Austria Finance / Legal / Insurance pending
    Ransomware servicepower.com id28521 View details United Kingdom IT
    Ransomware bigalsfoodservice.co.uk id28522 View details United Kingdom Agriculture / Food
    Ransomware gannons.co.uk id28523 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware pindrophearing.co.uk id28524 View details United Kingdom Healthcare / Pharma
    Ransomware talonsolutions.co.uk id28525 View details United Kingdom IT
    Ransomware northernsafety.com id28526 View details United States Retail / E-commerce
    Ransomware legilog.fr id28527 View details France IT
    Ransomware scopeset.de id28528 View details Germany IT pending
    Ransomware trinitesolutions.com id28529 View details United States IT
    Ransomware assurified.com id28530 View details United States Finance / Legal / Insurance
    Ransomware baldinger-ag.ch id28531 View details Switzerland Manufacturing / Engineering pending
    Ransomware lamaisonducitron.com id28532 View details France Agriculture / Food pending
    Ransomware protectasecurity.pe id28533 View details Peru Finance / Legal / Insurance pending
    Ransomware netromsoftware.ro id28534 View details Romania IT
    Ransomware sella.eng.br id28535 View details Brazil Construction / Real Estate pending
    Ransomware polleninformation.at id28536 View details Austria Healthcare / Pharma pending
    Ransomware sansirostadium.com id28537 View details Iran, Islamic Republic of Hospitality / Food & Beverage / Tourism pending
    Ransomware siapenet.gov.br id28538 View details Brazil Public Sector pending
    Ransomware certifiedinfosec.com id28539 View details United States Education pending
    Ransomware aliorbank.pl id28540 View details Poland Finance / Legal / Insurance pending
    Ransomware bms.com id28541 View details United States Healthcare / Pharma pending
    Ransomware minerasancristobal.com id28542 View details Mexico Energy
    Ransomware prixet.com id28543 View details IT
    Ransomware hl.co.uk id28544 View details United Kingdom Finance / Legal / Insurance
    Ransomware compensatii.gov.md id28545 View details Moldova, Republic of Public Sector pending
    Ransomware mahidol.ac.th id28546 View details Thailand Education leaked
    Ransomware corahperu.org id28547 View details Peru Public Sector leaked
    Ransomware amtaar.com id28548 View details United Arab Emirates Agriculture / Food leaked
    Ransomware banak.com id28549 View details Türkiye Retail / E-commerce leaked
    Ransomware bankasia-bd.com id28550 View details Bangladesh Finance / Legal / Insurance
    Ransomware bg.ac.rs id28551 View details Serbia Education leaked
    Ransomware novoair-bd.com id28552 View details Bangladesh Transportation / Travel / Logistics
    Ransomware seit.cl id28553 View details Chile IT
    Ransomware gedco.ps id28554 View details Palestine, State of Energy leaked
    Ransomware haca.ma id28555 View details Morocco Public Sector leaked
    Ransomware shj.ae id28556 View details United Arab Emirates Public Sector
    Ransomware moccae.gov.ae id28557 View details United Arab Emirates Public Sector leaked
    Ransomware vanheyghenstaal.be id28558 View details Belgium Manufacturing / Engineering leaked
    Ransomware isosl.be id28559 View details Belgium Healthcare / Pharma leaked
    Ransomware doghairinc.com id28560 View details United States Services leaked
    Ransomware dpwh.gov.ph id28561 View details Philippines Public Sector leaked
    Ransomware iam.ma id28562 View details Morocco Telecommunications
    Ransomware ires.ma id28563 View details Morocco Public Sector leaked
    Ransomware 2m.ma id28564 View details Morocco Communication / Marketing leaked
    Ransomware centrum.sk id28565 View details Slovakia Communication / Marketing
    Ransomware asunim.co id28566 View details Colombia Energy
    Ransomware egov.sc id28567 View details Seychelles Public Sector
    Ransomware phb.com id28568 View details Germany Finance / Legal / Insurance
    Ransomware whessoe.com.my id28569 View details Malaysia Manufacturing / Engineering leaked
    Ransomware olpro.com.my id28570 View details Malaysia Manufacturing / Engineering leaked
    Ransomware ifmis.go.ke id28571 View details Kenya Public Sector
    Ransomware algosaibi-gtb.com id28572 View details Saudi Arabia Manufacturing / Engineering leaked
    Ransomware alx-pc.com id28573 View details Germany Education leaked
    Ransomware arrawdah.org.sa id28574 View details Saudi Arabia NGOs / Associations
    Ransomware cofaco.com id28575 View details Colombia Agriculture / Food leaked
    Ransomware dunav.com id28576 View details Serbia Finance / Legal / Insurance
    Ransomware grupo-principal.com id28577 View details Mexico Construction / Real Estate leaked
    Ransomware jgpetrucci.com id28578 View details United States Construction / Real Estate leaked
    Ransomware medikaplaza.com id28579 View details Pakistan Healthcare / Pharma leaked
    Ransomware providentgh.com id28580 View details Ghana Finance / Legal / Insurance
    Ransomware tni.mil.id id17783 View details Indonesia Other
    Ransomware autogedal.ro id17616 View details Romania Transportation / Travel / Logistics
    Ransomware boostheat.com id17231 View details France Manufacturing / Engineering pending
    Ransomware mistralsolutions.com id17174 View details India Services
    Ransomware India car owners id17173 View details India Telecommunications