Arvinclub
Arvin Club is a threat actor with hacktivist leanings that first appeared in May 2021, primarily publishing stolen data via a TOR site and Telegram rather than deploying file-encrypting ransomware, targeting government, education, and banking sectors globally including Iranian government entities.
Victims
35
First Discovered
2021-09-09
victim
Last Discovered
2023-10-15
victim
Inactive Since
2yrs
more than
Avg Delay
7.4
days
Infostealer
16.7%
victims with domain
Countries
5
hit
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Arvin Club – آزادی برای اتصال | No | 2026-04-28T07:22:35 |
3kp6j22pz3zkv76yutctosa6djpj4yib2icvdqxucdaxxedumhqicpad.onion
|
|||
|
Arvin | Blog | No | 2026-04-28T07:25:10 |
arvinc7prj6ln5wpd6yydfqulsyepoc7aowngpznbn3lrap2aib6teid.onion
|
Target
Top 5 Activity Sectors
- Education 4
- Agriculture and Food Production 4
- Financial Services 4
- Consumer Services 3
- Business Services 2
Top 5 Countries
-
Iran, Islamic Republic of
8
-
Colombia
3
-
United Kingdom
1
-
India
1
-
Russian Federation
1
Heatmap
YARA Rules (1)
Victims (35)
