Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Noname

| RaaS

NoName (also known as CosmicBeetle) is a ransomware group active since at least 2020 targeting small and medium-sized businesses globally using its custom ScRansom tool, exploiting vulnerabilities like EternalBlue and ZeroLogon, and becoming a RansomHub affiliate to access that platform's RaaS infrastructure.
External information

Victims
3
 
First Discovered
2024-01-16
victim
Last Discovered
2024-01-16
victim
Inactive Since
2yrs
more than
Avg Delay
126.3
days
Infostealer
66.7%
victims with domain
Countries
2
hit
View Victims on World Map View Group Statistics

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon NO-NAME Blog Since 2020 – 2023 No 2026-04-28T07:25:34 noname2j6zkgnt7ftxsjju5tfd3s45s4i3egq5bqtl72kgum4ldc6qyd.onion

Target
Top 5 Activity Sectors
  • Technology 1
  • Agriculture and Food Production 1
  • Business Services 1
Top 5 Countries
  • US flag United States 2
  • BR flag Brazil 1

Heatmap

Ransom Notes (2)

YARA Rules (1)

Indicators of Compromise (IoCs) (5)
Email 3 tox 2
Type IOC
Email nonamehack2023@gmail.com
Email nonamehack2023@tutanota.com
Email tufhackteam@gmail.com
tox A5F2F6058F70CE5953DC475EE6AF1F97FC6D487ABEBAE76915075E3A53525B1D863102EDD50E
tox F1D0F45DBC3F4CA784D5D0D0DD8ADCD31AB5645BE00293FE6302CD0381F6527AC647A61CB08D

Victims (3)
Logo
Discovered: 2024-01-16 (2y ago)  ·  Attack est.: 2023-09-11
M Since 1992, The Noble Group has built a dedicated team of professionals all working together to re…
Logo
Discovered: 2024-01-16 (2y ago)  ·  Attack est.: 2023-09-12
– Established in 1966; – Manufacturer of flour based products, such as dry pasta, tradit…
Logo
Discovered: 2024-01-16 (2y ago)  ·  Attack est.: 2023-09-12
Onyx-Fire Protection Services Inc is a company that operates in the Security and Investigations indu…