Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Aurora

| Active

Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.

Victims
22
 
First Discovered
2026-04-29
victim
Last Discovered
2026-07-29
victim
Inactive Since
1
day
Avg Delay
12
days
Infostealer
9.1%
victims with domain
Countries
9
hit
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months
-91% vs last month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon Aur0ra Blog Yes 2026-07-30T04:43:15 NGINX nginx u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion

Target
Top 5 Activity Sectors
  • Manufacturing 7
  • Professional Services 5
  • Healthcare 2
  • Retail & E-Commerce 2
  • Financial Services 2
Top 5 Countries
  • US flag United States 7
  • DE flag Germany 4
  • CA flag Canada 3
  • PE flag Peru 1
  • NL flag Netherlands 1

Heatmap

Ransom Notes (1)

YARA Rules (1)

Victims (22)
Logo
Discovered: 2026-07-29 (22h ago)
Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devic…
Logo
Discovered: 2026-06-30 (29d ago)
[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of t…
Logo
Discovered: 2026-06-23 (1mo ago)
[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations a…
Logo
Discovered: 2026-06-22 (1mo ago)
*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties…
Logo
Discovered: 2026-06-22 (1mo ago)
[engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor he…
Logo
Discovered: 2026-06-22 (1mo ago)
[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade syst…
Logo
Discovered: 2026-06-22 (1mo ago)
[insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-hau…
Logo
Discovered: 2026-06-19 (1mo ago)
*** — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ ente…
Logo
Discovered: 2026-06-19 (1mo ago)  ·  Attack est.: 2026-06-05
[certification, inspection] ALS Limited (ASX:ALQ) — a global testing, inspection, and certification …
Logo
Discovered: 2026-06-16 (1mo ago)
[food] Allan Brothers, Inc. — a third-generation, family-owned tree-fruit operation headquartered in…
Logo
Discovered: 2026-06-16 (1mo ago)
[dealership, trucks] *** — Western Canada's largest International Trucks dealership group (9 dealer …
Logo
Discovered: 2026-06-16 (1mo ago)
[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE…
Logo
Discovered: 2026-05-12 (2mo ago)
Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regio…
Logo
Discovered: 2026-05-12 (2mo ago)  ·  Attack est.: 2026-04-23
Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Caw…
Logo
Discovered: 2026-05-12 (2mo ago)  ·  Attack est.: 2026-04-23
[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company head…
Logo
Discovered: 2026-04-29 (3mo ago)  ·  Attack est.: 2026-04-17
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular di…
Logo
Discovered: 2026-04-29 (3mo ago)  ·  Attack est.: 2026-04-22
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia…
Logo
Discovered: 2026-04-29 (3mo ago)  ·  Attack est.: 2026-04-22
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years The single largest data category: 75,855 passpo…
Logo
Discovered: 2026-04-29 (3mo ago)  ·  Attack est.: 2026-04-23
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used /…
Logo
Discovered: 2026-04-29 (3mo ago)
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufa…
Logo
Discovered: 2026-04-29 (3mo ago)
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquarte…
Logo
Discovered: 2026-04-29 (3mo ago)
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services pr…