Cipherforce
CipherForce is a newly emerged ransomware group first detected in early 2026, operating a dark web leak site and targeting technology, business services, and logistics companies across the US, China, Vietnam, India, and UAE, with at least 6 claimed victims.
Victims
6
First Victim
2026-02-23
(est. attack date)
Discovery Date
2026-02-23
Last Seen
2026-02-23
Inactive Since
182
days
Avg Delay
N/A
attack→claim
Infostealer
60.0%
victims with domain
Countries
5
hit
Uptime
0.0% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
CipherForce Leak Site - Victims | No | 2026-08-22T08:31:52 |
o3ydbkayttkyg4iw2nc732jxmmex25bjeyqyvuuyngnxmpehdefjr3qd.onion
|
Target
Top 5 Activity Sectors
- Technology 3
- Transportation 1
- Professional Services 1
Top 5 Countries
-
United States
2
-
United Arab Emirates
1
-
Viet Nam
1
-
India
1
-
China
1
Heatmap
YARA Rules (1)
Victims (6)
[AI generated] "Zip24 - ShipOx" is an advanced logistics company specializing in shipping and freigh…
[AI generated] "FindNear" is a location-based technology company that provides a platform for users …
[AI generated] TektTree Inc. is a global technology consulting and IT service provider that offers s…
[AI generated] "HiringSteps.com" is a robust online cloud-based platform designed to streamline the …
