Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Falcon

New Group | Active

This is an emerging group, so claims should be treated with caution until independently verified.
None

Victims
3
 
First Victim
2026-07-14
(est. attack date)
Discovery Date
2026-08-30
 
Last Seen
2026-08-31
 
Inactive Since
3
days
Avg Delay
28
days
Infostealer
100.0%
victims with domain
Countries
1
hit
Uptime
98.4% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN Status
favicon Falcon Yes 2026-09-03T20:07:11 NGINX nginx i7loab6thvz4lb7jdr3qoeumbvilwhbgnwsctnlfmvsv7g5s3vsiw6yd.onion
Target
Top 5 Activity Sectors
  • Manufacturing 2
  • Healthcare 1
Top 5 Countries
  • US flag United States 3
Heatmap
Indicators of Compromise (IoCs) (1)
PGP 1
Type IOC
PGP 
-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEakYL3hYJKwYBBAHaRw8BAQdASdfdbvxIQLyfVn2kuYxTpf9qlunWfSsoujUC
p9uKz/u0LEZhbGNvbiAoaHR0cHM6Ly9mYWxjb24ub25pb24pIDxmYWxjb25Ab25p
b24+iK8EExYKAFcWIQSskjh6Gk1k8LWsCP+z/+gxuP+gHAUCakYL3hsUgAAAAAAE
AA5tYW51MiwyLjUrMS4xMiwwLDMCGwMFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcC
F4AACgkQs//oMbj/oBwMHgEAuxgxL9lJoSWd+uFgigHwPTctVBBGDlYAZ9mKCjUN
ZN8BAJOhd57lTtrJst+wHsYEWMjBeA/ZZVFCWjJtYNeKGb0J
=rNA1
-----END PGP PUBLIC KEY BLOCK-----
Victims (3)
Logo
Hayward Holdings US
Falcon
Discovered: 2026-08-31 (3d ago)
Pool & spa equipment · NYSE: HAYW - Our 848 GB extraction includes your Salesforce, 1+ million of e…
Logo
Globus Medical US
Falcon
Discovered: 2026-08-30 (4d ago)  ·  Attack est.: 2026-08-21
Medical devices · NYSE: GMED - Our 2.96 TB extraction includes your entire Microsoft PowerBi which …
Logo
DistributionNOW (DNOW Inc.) US
Falcon
Discovered: 2026-08-30 (4d ago)  ·  Attack est.: 2026-07-14
Energy & industrial distribution · NYSE: DNOW - Our 344 GB extraction includes your corporate infor…