Ransomware Group intelligence
Settra
ActiveTrack Settra with 58 published victims and 2 known leak locations in a single intelligence view.
Overview
Settra is tracked by Breach House as a ransomware group with 58 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | settra5ldqwgtw5q7z5awbsvlksakyfojuc5slgrz5lvapune4fantqd.onion |
| Leak location 2 | Web location | Unknown | settra5ldqwgtw5q7z5awbsvlksakyfojuc5slgrz5lvapune4fantqd.onion/leaks |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (58)
Search, filter and paginate the victim timeline for Settra. Showing 1–58 of 58.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | samuelkoon.com id30590 View details | Singapore | Other | ||
|
Samuelkoon.com is an entity based in Singapore, operating in the other sector. The entity's specific offerings are not well-documented. Samuelkoon.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | samuelkoon.com id30590 View details | Singapore | Other | ||
|
How Samuel D. Koon & Associates Controls a $25 Million Portfolio and 350+ Bank Accounts PROLOGUE... |
|||||
| Ransomware | samuelkoon.com id30590 View details | United States | Other | ||
|
How Samuel D. Koon & Associates Controls a $25 Million Portfolio and 350+ Bank Accounts PROLOGUE... |
|||||
| Ransomware | acilab.com id30588 View details | Brazil | IT | ||
|
Acilab.com is an IT company based in Brazil, providing various IT services. As an IT company, acilab.com likely offers services such as software development, consulting, and technology solutions. Acilab.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | acilab.com id30588 View details | Brazil | IT | ||
|
How ACI Financed Its Owners' Companies — and Paid Them Rent PROLOGUE Inside the archive of American ... |
|||||
| Ransomware | torsiongroup.co.uk id30589 View details | United Kingdom | Manufacturing / Engineering | ||
|
Torsiongroup.co.uk is a UK-based company operating in the manufacturing and engineering sector. The company provides various services and products to its clients. Torsiongroup.co.uk was listed as a ransomware victim associated with settra |
|||||
| Ransomware | torsiongroup.co.uk id30589 View details | United Kingdom | Manufacturing / Engineering | ||
|
END OF THE LINE A company that builds homes and promises safety to its residents failed to protect t... |
|||||
| Ransomware | wtlawllp.co.uk id30376 View details | United Kingdom | Finance / Legal / Insurance | ||
|
wtlawllp.co.uk is a UK-based law firm operating in the finance and legal sector, providing various services to clients. The company is located in Great Britain and offers expertise in areas such as law and insurance. wtlawllp.co.uk was listed as a ransomware victim associated with settra |
|||||
| Ransomware | wtlawllp.co.uk id30376 View details | United Kingdom | Finance / Legal / Insurance | ||
|
WT Law LLP: Internal Documents of a UK Law Firm PROLOGUE Inside: full credit reports with data from ... |
|||||
| Ransomware | gvfsinc.com id30377 View details | United States | Finance / Legal / Insurance | ||
|
GVFS Inc is a financial services company based in the United States, operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. GVFS Inc was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | gvfsinc.com id30377 View details | United States | Finance / Legal / Insurance | ||
|
GREEN VALLEY: SELF-LEASE SCHEME How a California agricultural distributor pays rent to companies con... |
|||||
| Ransomware | bergdemo.com id30371 View details | Germany | Other | ||
|
Bergdemo.com is a German entity operating in the other sector, providing various offerings to its customers. Located in Germany, the company serves its clients with a range of services. Bergdemo.com was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | bergdemo.com id30371 View details | Germany | Other | ||
|
Berg / Crushing Corporation of America: Demolition on Federal Money PROLOGUE In our possession are i... |
|||||
| Ransomware | petradiamonds.com id30133 View details | United Kingdom | Retail / E-commerce | ||
|
Petradiamonds.com operates in the retail and e-commerce sector, based in the United Kingdom, offering various products to its customers. As an e-commerce platform, it provides online shopping experiences. Petradiamonds.com was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | petradiamonds.com id30133 View details | United Kingdom | Retail / E-commerce | ||
|
THE DIAMOND ARCHIVE: Petra Diamonds Limited Documents PROLOGUE A complete employee directory with na... |
|||||
| Ransomware | orion4value.com id30131 View details | Germany | IT | ||
|
Orion4value.com is a German-based company operating in the IT sector, providing various services. The company is located in Germany and offers solutions related to its field of expertise. Orion4value.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | orion4value.com id30131 View details | Germany | IT | ||
|
THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc. PROLOGUE Financial reports and... |
|||||
| Ransomware | clc-tn.com id30118 View details | Tunisia | NGOs / Associations | ||
|
clc-tn.com is a website associated with a non-governmental organization or association based in Tennessee, providing various services and resources to its members and the community. The organization operates in the sector of NGOs and Associations, focusing on supporting and empowering its constituents. clc-tn.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | clc-tn.com id30118 View details | Tunisia | NGOs / Associations | ||
|
City Lumber Company: Building Materials in Tennessee — What Lies Behind the Small Sign PROLOGUE In o... |
|||||
| Ransomware | joyconstructionnyc.com id30119 View details | United States | Construction / Real Estate | ||
|
Joy Construction NYC is a construction company based in the United States, operating in the construction and real estate sector. The company likely provides various construction services to clients in the New York City area. Joy Construction NYC was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | joyconstructionnyc.com id30119 View details | United States | Construction / Real Estate | ||
|
Joy Construction Corp: $1.3 Billion in Affordable Housing — and $8.7 Million to a Shareholder in Six... |
|||||
| Ransomware | wilfley.com id30120 View details | United States | Manufacturing / Engineering | ||
|
Wilfley.com is a company operating in the manufacturing and engineering sector, based in the United States. The company likely provides various products and services related to its sector. Wilfley.com was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | wilfley.com id30120 View details | United States | Manufacturing / Engineering | ||
|
SEAL FAILURE A company that builds pumps for chemical and defense production — and undertakes to con... |
|||||
| Ransomware | rcfassoc.com id30130 View details | United States | Finance / Legal / Insurance | ||
|
rcfassoc.com is a US-based company operating in the finance, legal, and insurance sector, providing various services to its clients. The company is located in the US and offers a range of financial and legal services. rcfassoc.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | rcfassoc.com id30130 View details | United States | Finance / Legal / Insurance | ||
|
R.C. FIELDS & ASSOCIATES: Client Data, Hidden Development Risks, and Uninvestigated Security Inc... |
|||||
| Ransomware | owensborograin.com id30113 View details | United States | Agriculture / Food | ||
|
Owensborograin.com is an entity operating in the agriculture and food sector in the United States. The company likely provides grain-related services, given its name and industry classification. Owensborograin.com was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | owensborograin.com id30113 View details | United States | Agriculture / Food | ||
|
PROCESSING: GRAIN IN SOMEONE ELSE'S MILL PROLOGUE Tax returns filed with the IRS under threat of "fi... |
|||||
| Ransomware | ilex-paysages.com id30114 View details | France | Construction / Real Estate | ||
|
Ilex Paysages is a company based in France that operates in the construction and real estate sector, providing services related to landscape development and management. The company's offerings likely include design, construction, and maintenance of outdoor spaces for various clients. Ilex Paysages was listed as a ransomware victim associated with Settra. |
|||||
| Ransomware | ilex-paysages.com id30114 View details | France | Construction / Real Estate | ||
|
LANDSCAPE ARCHIVE: How Ilex Paysages et Urbanisme Stores Its Own — and Others' — Secrets PROLOGUE Th... |
|||||
| Ransomware | touredge.com id30115 View details | United States | Manufacturing / Engineering | ||
|
Touredge.com operates in the manufacturing and engineering sector, providing services in the United States. As a company in this sector, it likely offers various products and services related to manufacturing and engineering. Touredge.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | touredge.com id30115 View details | United States | Manufacturing / Engineering | ||
|
The Breaking Point A golf club manufacturer sells precision, durability, and control as a philosophy... |
|||||
| Ransomware | vcnyhome.com id30116 View details | United States | Retail / E-commerce | ||
|
Vcnyhome.com is an e-commerce company based in the United States, operating in the retail sector. The company offers various products online, catering to a wide range of customers. Vcnyhome.com was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | vcnyhome.com id30116 View details | United States | Retail / E-commerce | ||
|
THE VCNY HOME ARCHIVE The company that sells home comfort failed to protect its own home — its inter... |
|||||
| Ransomware | infinedi.net id30117 View details | United States | IT | ||
|
Infinedi.net is an IT company based in the United States, offering various services within the IT sector. As a US-based entity, infinedi.net operates in a highly competitive market, providing IT solutions to its clients. Infinedi.net was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | infinedi.net id30117 View details | United States | IT | ||
|
Clearinghouse The company doctors pay to keep their patients' data safe. This article presents only ... |
|||||
| Ransomware | canopybrands.us id30056 View details | Canada | Retail / E-commerce | ||
|
Canopy Brands US operates in the retail and e-commerce sector, offering various products to customers in Canada. As an e-commerce company, it provides online shopping experiences. Canopy Brands US was listed as a ransomware victim associated with Settra. |
|||||
| Ransomware | canopybrands.us id30056 View details | Canada | Retail / E-commerce | ||
|
Limit of Travel A holding company that sells people safety at height failed to keep its own data saf... |
|||||
| Ransomware | conduril.pt id30057 View details | Portugal | Construction / Real Estate | ||
|
Conduril.pt is a Portugal-based company operating in the construction and real estate sector, providing various services to its clients. The company is involved in multiple projects across Portugal. Conduril.pt was listed as a ransomware victim associated with settra |
|||||
| Ransomware | conduril.pt id30057 View details | Portugal | Construction / Real Estate | ||
|
CONDURIL: WHAT THE COMPANY THAT BUILDS EVERYTHING IS BUILDING PROLOGUE: A FOUNDATION OF PAPER Condur... |
|||||
| Ransomware | hmcfarms.com id30058 View details | United States | Agriculture / Food | ||
|
Hmcfarms.com operates in the agriculture and food sector in the United States, providing various offerings to its customers. As an entity in this sector, it plays a role in the country's food supply chain. Hmcfarms.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | hmcfarms.com id30058 View details | United States | Agriculture / Food | ||
|
THE HMC GROUP: OPEN FIELD A California Central Valley agricultural holding feeds America peaches. It... |
|||||
| Ransomware | doosan.com id30059 View details | Korea, Republic of | Manufacturing / Engineering | ||
|
Doosan is a South Korean conglomerate with a diverse range of businesses in the manufacturing and engineering sector. The company offers various products and services, including construction equipment, engines, and industrial systems. Doosan operates globally, with its headquarters located in Seoul, South Korea. It was listed as a ransomware victim associated with Settra |
|||||
| Ransomware | doosan.com id30059 View details | Korea, Republic of | Manufacturing / Engineering | ||
|
How Doosan / Geith / Bobcat Buries Defects and Protects Its Secrets PROLOGUE: 3.27 TERABYTES OF FILE... |
|||||
| Ransomware | tmscentral.com id30060 View details | United States | Transportation / Travel / Logistics | ||
|
Tmscentral.com is a US-based company operating in the transportation and logistics sector, providing services to facilitate the movement of goods. The company's offerings cater to the needs of the travel and logistics industry. Tmscentral.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | tmscentral.com id30060 View details | United States | Transportation / Travel / Logistics | ||
|
A SIGNAL WITH NO BACKUP: How Total Monitoring Services Sells Multi-Channel Protection and Routes the... |
|||||
| Ransomware | va-glass.com id30061 View details | Holy See (Vatican City State) | Manufacturing / Engineering | ||
|
Va-glass.com is a company based in Virginia, operating in the manufacturing and engineering sector, providing various products and services. The company's offerings cater to the needs of its clients in the region. Va-glass.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | va-glass.com id30061 View details | Holy See (Vatican City State) | Manufacturing / Engineering | ||
|
THE TRANSPARENT MIRROR A company that sells people glass and reflections failed to protect its own r... |
|||||
| Ransomware | pchome.com.tw id30062 View details | Taiwan, Province of China | Retail / E-commerce | ||
|
Pchome.com.tw is a prominent e-commerce platform in Taiwan, offering a wide range of products and services to its customers. As a major player in the retail sector, it provides online shopping experiences to consumers across the country. Pchome.com.tw was listed as a ransomware victim associated with settra |
|||||
| Ransomware | pchome.com.tw id30062 View details | Taiwan, Province of China | Retail / E-commerce | ||
|
HOW A TAIWANESE GIANT SOLD OUT ITS CUSTOMERS A payment company sells trust, security, and reliabilit... |
|||||
| Ransomware | dystar.com id30063 View details | Singapore | Manufacturing / Engineering | ||
|
DyStar is a global leader in the manufacturing and engineering sector, providing high-quality products and services to its customers. Located in Singapore, the company operates in a competitive market, offering innovative solutions to meet the evolving needs of its clients. DyStar was listed as a ransomware victim associated with Settra. |
|||||
| Ransomware | dystar.com id30063 View details | Singapore | Manufacturing / Engineering | ||
|
The Complete Digital Archive of DyStar PROLOGUE: WHAT WE HAVE IN OUR HANDS 1.3 terabytes of data — f... |
|||||
| Ransomware | qdi.com id30064 View details | Taiwan, Province of China | IT | ||
|
Qdi.com is an IT company based in Taiwan, providing various IT services. The company operates in the IT sector, offering solutions to its clients. Qdi.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | qdi.com id30064 View details | Taiwan, Province of China | IT | ||
|
HOW QUALITY DINING CONVERTS LOSS INTO PROFIT PROLOGUE: ONE STORY ABOUT FINANCIAL ADJUSTMENTS Quality... |
|||||
| Ransomware | qdi.com id30064 View details | United States | IT | ||
|
HOW QUALITY DINING CONVERTS LOSS INTO PROFIT PROLOGUE: ONE STORY ABOUT FINANCIAL ADJUSTMENTS Quality... |
|||||
| Ransomware | turbodata.com id30065 View details | United States | IT | ||
|
Turbodata.com is an IT company based in the United States, offering various services within the IT sector. As a US-based entity, turbodata.com operates in a highly competitive market, providing solutions to its clients. Turbodata.com was listed as a ransomware victim associated with settra. |
|||||
| Ransomware | turbodata.com id30065 View details | United States | IT | ||
|
TICKET ISSUED: How Turbo Data Systems Built a Dossier on Half of California From a Slip of Paper Und... |
|||||
| Ransomware | lifevantage.com id30066 View details | United States | Healthcare / Pharma | ||
|
Lifevantage.com is a US-based company operating in the healthcare and pharma sector, offering various products and services. The company is involved in the development and distribution of health-related products. Lifevantage.com was listed as a ransomware victim associated with settra |
|||||
| Ransomware | lifevantage.com id30066 View details | United States | Healthcare / Pharma | ||
|
THE NEUTRALIZING FACTOR: How LifeVantage Corporation Profits from Hope and Buries the Truth PROLOGUE... |
|||||