Auditteam
| Active
AuditTeam is a small ransomware group with approximately 5 known victims, primarily targeting organizations in East and Southeast Asia across technology and manufacturing sectors, operating a data leak site consistent with double-extortion methodology.
Victims
15
First Discovered
2026-04-08
victim
Last Discovered
2026-06-25
victim
Inactive Since
13
days
Avg Delay
21.2
days
Infostealer
66.7%
victims with domain
Countries
8
hit
Attack Velocity — Last 12 months
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
/// DATA EXPOSURE TERMINAL /// | Yes | 2026-07-08T16:39:07 | nginx 1.18.0 |
6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion
|
||
|
[ SYSTEM ERROR ] | No | 2026-07-08T16:38:20 |
cjg2avmzoly7k6mw7xobnyre354jxro4qegkoazhsmigdk2j3aziexyd.onion
|
Target
Top 5 Activity Sectors
- Technology 2
- Consumer Services 1
- Public Sector 1
- Transportation/Logistics 1
- Manufacturing 1
Top 5 Countries
-
Russian Federation
6
-
Senegal
2
-
Türkiye
1
-
Philippines
1
-
Korea, Republic of
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (15)
mopas.com.tr is a prominent Turkish retail chain and e-commerce platform primarily serving the Marma…
DGCPT (Direction Générale de la Comptabilité Publique et du Trésor) is Senegal's public treasury aut…
Kawasaki Motors Philippines Corporation (KMPC), located in Muntinlupa, Metro Manila, is a leading ma…
