Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Dark project

Active
World map Statistics
Dark Project is a newly emerged ransomware leak operation active as of August 2026. The group utilizes a double extortion model (stealing sensitive data before encrypting local systems and threatening to leak it on their dark web portal).
Victims
43
7 this month
Rank
#122 / 388
#52 over the last 12 months
First victim
2026-06-08
estimated attack date
Last victim
2026-11-13
2 days ago
Attack → claim
21.4 d
average delay
Countries
9
hit
Infostealer
37.2%
of victims with a domain
Leak-site uptime
91.8% average, 30 days

Victims per month

+17%
By estimated attack date when known, otherwise by discovery date.

Top sectors

  • Manufacturing 14 · 33%
  • Healthcare 8 · 19%
  • Professional Services 4 · 9%
  • Retail & E-Commerce 3 · 7%
  • Transportation 3 · 7%
  • Agriculture and Food Production 2 · 5%
  • Hospitality 2 · 5%
  • Education 1 · 2%
  • Other 1 · 2%
  • Energy & Utilities 1 · 2%

Top countries

What ransomware.live knows about Dark Project