Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Dysphor1a

New Group | Active

This is an emerging group, so claims should be treated with caution until independently verified.
Suspicious group. We did not manage to confirm any victims.

Victims
8
 
First Victim
2026-08-20
(est. attack date)
Discovery Date
2026-08-20
 
Last Seen
2026-08-23
 
Inactive Since
7
days
Avg Delay
N/A
attack→claim
Infostealer
100.0%
victims with domain
Countries
5
hit
Uptime
90.4% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)
8 victims this month

Known Locations (3)
Favicon Title Type Available Last Visit Server Info FQDN Status
favicon DYSPHOR1A Ransomware Group Yes 2026-08-30T11:11:23 Surge normalhunters0x.surge.sh
favicon DYSPHOR1A Ransomware Group No 2026-08-30T11:12:47 NGINX nginx 1.24.0 y3maveiwszbnrziufbbberx74cvrdcsf72nxzuqxzv7ppdmmqzffazid.onion
favicon // members Yes 2026-08-30T11:14:29 openresty null.yzz.me

Target
Top 5 Activity Sectors
  • Education 3
  • Technology 1
  • Transportation 1
  • Financial Services 1
  • Government & Defense 1
Top 5 Countries
  • MM flag Myanmar 3
  • TH flag Thailand 2
  • FR flag France 1
  • IN flag India 1
  • ID flag Indonesia 1

Heatmap

Indicators of Compromise (IoCs) (1)
Telegram 1
Type IOC
Telegram t.me/jacudeez

Victims (8)
Logo
Discovered: 2026-08-23 (7d ago)
Netim is a French domain name registrar and web hosting provider. Full compromise of internal system…
Logo
Discovered: 2026-08-21 (9d ago)
Yoma Fleet is a leading vehicle operating lease, rental, and financing company based in Yangon, Myan…
Logo
Discovered: 2026-08-20 (9d ago)
The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It i…
Logo
Discovered: 2026-08-20 (9d ago)
Leaked data from AYUDHYA (TH Insurance / Allianz Thailand). Internal batch-control system used withi…
Logo
Discovered: 2026-08-20 (9d ago)
Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed use…
Logo
Discovered: 2026-08-20 (9d ago)
Database containing records of 52,000 Indonesian police officers including email addresses, phone nu…
Logo
Discovered: 2026-08-20 (9d ago)
Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information,…
Logo
Discovered: 2026-08-20 (9d ago)
Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, …