Auditteam
| Active
AuditTeam is a small ransomware group with approximately 5 known victims, primarily targeting organizations in East and Southeast Asia across technology and manufacturing sectors, operating a data leak site consistent with double-extortion methodology.
Victims
34
First Victim
2026-02-21
(est. attack date)
Discovery Date
2026-04-08
Last Seen
2026-09-13
Inactive Since
1
day
Avg Delay
10.5
days
Infostealer
100.0%
victims with domain
Countries
14
hit
Uptime
95.9% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
+117% vs last month
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
/// DATA EXPOSURE TERMINAL /// | Yes | 2026-09-14T03:30:35 | nginx 1.18.0 |
6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion
|
|||
|
[ SYSTEM ERROR ] | Yes | 2026-09-14T03:29:50 |
cjg2avmzoly7k6mw7xobnyre354jxro4qegkoazhsmigdk2j3aziexyd.onion
|
Target
Top 5 Activity Sectors
- Technology 5
- Transportation 2
- Manufacturing 2
- Other 1
- Financial Services 1
Top 5 Countries
-
Russian Federation
15
-
Korea, Republic of
3
-
Germany
2
-
Colombia
2
-
Senegal
2
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (34)
mansurovogroup is an integrated agricultural enterprise based in Kursk Oblast, Russia. It operates a…
Demidov Steel Group (ГК Демидов) is a Russian metal products manufacturer and trader, website: demid…
mopas.com.tr is a prominent Turkish retail chain and e-commerce platform primarily serving the Marma…
DGCPT (Direction Générale de la Comptabilité Publique et du Trésor) is Senegal's public treasury aut…
Kawasaki Motors Philippines Corporation (KMPC), located in Muntinlupa, Metro Manila, is a leading ma…
