Ragnarlocker

Legend

General Icons

Screenshot available
Company website
Infostealer data found
Victim has denied
Ransom amount known

Sector Icons

Manufacturing

Construction

Transportation/Logistics

Technology

Healthcare

Financial Services

Public Sector

Education

Business Services

Consumer Services

Energy

Telecommunication

Agriculture and Food Production

Hospitality and Tourism

Not Found

Location Types

DLS: Data Leak Site
Files: Files server
Chat: Negotiation chat portal
API: Application Programming Interface endpoint
Admin: Admin panel or backend interface

No description available.

External information

https://www.sygnia.co/blog/threat-actor-spotlight-ragnarlocker-ransomware/

Victims

128

First Discovered

victim

2020-04-01

Last Discovered

victim

2023-10-11

Inactive Since

more than

2 years

Avg Delay

between attack and claim

10 days

Infostealer

for victim with domain

0.0%

View Victims on World Map

View group statistics

Known Locations (4)

Title	Available	Last Visit	Server Info	FQDN
None	No	2025-06-01 21:19:12		`rgleak7op734elep.onion`
This site has been seized	Yes	2025-11-04 05:01:12	nginx 1.28.0	`rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion`
None	No	2025-06-01 21:20:46		`p6o7m73ujalhgkiv.onion`
This site has been seized	No	2025-11-04 06:01:11	nginx 1.28.0	`ragnarnwvli32xnmwudsvhbl7klzmofxeylyhcqfc5ifx5mbybq3ekqd.onion`

Screenshot Preview

Target (Available)

Top 5 Activity Sectors

Energy 1
Transportation Systems 1
Food and Agriculture 1
Critical Manufacturing 1

Top 5 Countries

France 3
Portugal 1
Italy 1

Heatmap (Available)

Ransom Notes (2)

!_^_README_NOTES_RAGNAR_^_!.txt
ragnarlocker1.txt

Tools Used (Available)

This information is provided by Ransomware-Tool-Matrix
Discovery	RMM Tools	Defense Evasion	Credential Theft	OffSec	Networking	LOLBAS	Exfiltration
Advanced Port Scanner Dsquery PsInfo SoftPerfect LanSearchPro	AnyDesk Remote Manipulator System (RMS) RemoteUtilities placeholder	VirtualBox placeholder placeholder placeholder	placeholder placeholder placeholder placeholder	Cobalt Strike placeholder placeholder placeholder	placeholder placeholder placeholder placeholder	PsExec WMIC placeholder placeholder	placeholder placeholder placeholder placeholder

Vulnerabilities Exploited (0)

No vulnerabilities exploited available.

TTPs Matrix (0)

No TTPs available.

Negotiation Chats (0)

No negotiation chats available.

YARA Rules (1)

ragnarlocker.yar

Indicators of Compromise (IoCs) (0)

No IoCs available for this group.

Victims (128)

Scotbeef Ltd. - Leaks Ragnarlocker

Discovery Date: 2023-10-11

N/A

Eicon Controle Inteligentes Ragnarlocker

Discovery Date: 2023-10-11

N/A

International Presence Ltd - Leaked Ragnarlocker

Discovery Date: 2023-10-06

N/A

Learning Partnership West - Leaked Ragnarlocker

Discovery Date: 2023-10-05

N/A

Groupe Fructa Partner - Leaked Ragnarlocker

Discovery Date: 2023-10-03

N/A

Network Pacific Real Estate - Leak Ragnarlocker

Discovery Date: 2023-09-30

N/A

Astre - Leaked Ragnarlocker

Discovery Date: 2023-09-30

N/A

Stratesys Full data leak Ragnarlocker

Discovery Date: 2023-09-25

N/A

Announcement: COMECA Group going to be Leaked Ragnarlocker

Discovery Date: 2023-09-22

N/A

Announcement: Skatax Accounting company going to be leaked Ragnarlocker

Discovery Date: 2023-09-22

N/A

Retail House - Full Leak Ragnarlocker

Discovery Date: 2023-09-22

N/A

Announcement: Stratesys solutions going to be leaked Ragnarlocker

Discovery Date: 2023-09-21

N/A

Announcement: Stratesys solutions going to b Ragnarlocker

Discovery Date: 2023-09-21

N/A

Announcement: Groupe Fructa Partner will be leaked soon Ragnarlocker

Discovery Date: 2023-09-19

N/A

CITIZEN company LEAKED Ragnarlocker

Discovery Date: 2023-09-18
Estimated Attack Date: 2023-09-17

N/A

Announcement: Retail House going to be LEAKED Ragnarlocker

Discovery Date: 2023-09-17

N/A

Updates: Israel "MYMC" Ragnarlocker

Discovery Date: 2023-09-15

N/A

Israel Medical Center - leaked Ragnarlocker

Discovery Date: 2023-09-06

N/A

DOIT - Canadian IT company allowed leak of its own clients. Ragnarlocker

Discovery Date: 2023-09-02

N/A

Batesville didn't react on appeal and allows Full Leak Ragnarlocker

Discovery Date: 2023-08-08

N/A

Batesville Tool & Die, Inc will be leaked in 3 Days Ragnarlocker

Discovery Date: 2023-07-31

N/A

Belize Electricity Limited - Leaked Ragnarlocker

Discovery Date: 2023-07-10

N/A

Portugal Scotturb Data Leaked Ragnarlocker

Discovery Date: 2023-07-05

N/A

Australian Universal Crane Leak Ragnarlocker

Discovery Date: 2023-05-28

N/A

Autlan Metallorum, Mexican Miner Leak Ragnarlocker

Discovery Date: 2023-05-18

N/A

CANTALK, Canadian translation services - Leak Ragnarlocker

Discovery Date: 2023-04-25

N/A

Public Appeal to the CANTALK management Ragnarlocker

Discovery Date: 2023-03-29

N/A

Temporary Leak Page #0013995NTa Ragnarlocker

Discovery Date: 2023-03-29
Estimated Attack Date: 2023-03-10

N/A

New Leak in lawyers company AASP. Ragnarlocker

Discovery Date: 2023-03-03

N/A

New Leak in lawyers company. Ragnarlocker

Discovery Date: 2023-03-03

N/A

AASP claim there was no data leakage! Ragnarlocker

Discovery Date: 2023-02-22

N/A

Hundred thousands of personal data, leak preview Ragnarlocker

Discovery Date: 2022-12-28

AOAL - Azienda Ospedaliera di Alessandria...

Wrapex Industrial - Leaked Ragnarlocker

Discovery Date: 2022-12-20

N/A

Serena Hotels - Leaked Ragnarlocker

Discovery Date: 2022-12-20

N/A

ITONCLOUD - LEAKED Ragnarlocker

Discovery Date: 2022-12-13

N/A

Essent company - Leaked Ragnarlocker

Discovery Date: 2022-11-25

N/A

Leak Announcement - IT company ITonCLOUD Ragnarlocker

Discovery Date: 2022-11-22

N/A

Belgium company Zwijndrecht - Leaked Ragnarlocker

Discovery Date: 2022-11-16

N/A

DURAVIT A.G. - Announcement before publishing data Ragnarlocker

Discovery Date: 2022-10-27

N/A

Dollmar SpA - Leaked Ragnarlocker

Discovery Date: 2022-10-19

N/A

DIPF-INTERN - Leaked Ragnarlocker

Discovery Date: 2022-10-18

N/A

Fashion company ZIGI NY - Leaked Ragnarlocker

Discovery Date: 2022-10-13

N/A

DMCI Holding Leaked Ragnarlocker

Discovery Date: 2022-10-10

N/A

TANG CAPITAL LEAKED Ragnarlocker

Discovery Date: 2022-10-10

N/A

Avalon luxury transport company - Leaked Ragnarlocker

Discovery Date: 2022-10-05

N/A

AudioQuest Data Leaked Ragnarlocker

Discovery Date: 2022-10-03

N/A

Malayan Flour Mills Bhd. Data Leak Ragnarlocker

Discovery Date: 2022-10-03

N/A

Who is the real Bad Guys here? Or what recovery experts prefer to keep silent. Ragnarlocker

Discovery Date: 2022-09-19

N/A

TAP Air Leak of more than 1.5 million of customers and many other. Ragnarlocker

Discovery Date: 2022-09-19

N/A

TAP AIR PORTUGAL - 115k personal data leak Ragnarlocker

Discovery Date: 2022-09-12

N/A

DDoS instead of the Discuss - Nice try TAP Air Ragnarlocker

Discovery Date: 2022-09-07

N/A

TAP Air - First Facts Ragnarlocker

Discovery Date: 2022-09-02

N/A

USA Insurance company - Smith brothers File tree and some proofs Ragnarlocker

Discovery Date: 2022-08-31

N/A

Huge drama for Tap Air Portugal Ragnarlocker

Discovery Date: 2022-08-31

N/A

Announcement. Action Lab File-tree Ragnarlocker

Discovery Date: 2022-08-23

N/A

DESFA - Pipeline company LEAK Ragnarlocker

Discovery Date: 2022-08-23

N/A

Greece pipeline company breached - DESFA Ragnarlocker

Discovery Date: 2022-08-19

N/A

File-tree of Tang Capital Ragnarlocker

Discovery Date: 2022-08-18

N/A

Puma Biotechnology - decided to allow Leaks Ragnarlocker

Discovery Date: 2022-08-02

N/A

GENSCO Inc. - allows Leak Ragnarlocker

Discovery Date: 2022-07-19

N/A

Epec.PL - Lied about the absence of Leak Ragnarlocker

Discovery Date: 2022-07-13

N/A

New Leak: Prudential LTG. Ragnarlocker

Discovery Date: 2022-06-24

N/A

New Leak: Northern Data Systems Ragnarlocker

Discovery Date: 2022-06-23

N/A

Sierra Packaging Leaked Ragnarlocker

Discovery Date: 2022-06-04

N/A

Jonathan Adler Leaks Ragnarlocker

Discovery Date: 2022-06-01

N/A

Germany Corporation "VMT-GmbH" Leaked Ragnarlocker

Discovery Date: 2022-05-23

N/A

Simonson-Lumber decided to be Leaked Ragnarlocker

Discovery Date: 2022-05-11

N/A

Simonson-Lumber Inc. First batch of Data. Ragnarlocker

Discovery Date: 2022-04-20

N/A

International Centre Leaked Ragnarlocker

Discovery Date: 2022-04-06

N/A

Smith Transport Full Leak Ragnarlocker

Discovery Date: 2022-03-14

N/A

GHI Hornos Industriales Fully Leaked Ragnarlocker

Discovery Date: 2022-03-04

N/A

GHI Hornos Industriales first batch of Data (0,1%) Ragnarlocker

Discovery Date: 2022-02-28

N/A

Airspan Networks got Leaked Ragnarlocker

Discovery Date: 2022-01-25

N/A

IT-companies Subex & Sectrio Leaked Ragnarlocker

Discovery Date: 2022-01-08

N/A

Company Group LDLC Ragnarlocker

Discovery Date: 2021-12-15

N/A

Leak of IT company Saksoft Ragnarlocker

Discovery Date: 2021-12-10

N/A

Full Data Leak Linical Ragnarlocker

Discovery Date: 2021-12-09

N/A

Update: Linicals Data Ragnarlocker

Discovery Date: 2021-12-04

N/A

Groupe LDLC is going to be Leaked Ragnarlocker

Discovery Date: 2021-12-02

N/A

Team Computers Ltd. - Leak Ragnarlocker

Discovery Date: 2021-11-23

N/A

LINICAL doesn't care about digital hygiene Ragnarlocker

Discovery Date: 2021-10-30

N/A

Atlas Financial Holdings, Inc. - Leaked Ragnarlocker

Discovery Date: 2021-10-06

N/A

FULL DATA LEAK of Primary Residential Mortgage, Inc. // Ragnarlocker

Discovery Date: 2021-09-14

N/A

Primary Residential Mortgage inc. - Leaked Ragnarlocker

Discovery Date: 2021-09-11

N/A

Who is the real Bad Guys here? Or what recovery experts prefer to keep silent. Ragnarlocker

Discovery Date: 2021-09-09

N/A

Announcement: FTP Ragnarlocker

Discovery Date: 2021-07-01

N/A

GATEWAY Property Management Ragnarlocker

Discovery Date: 2021-06-23

N/A

Software company Xoriant Ragnarlocker

Discovery Date: 2021-06-06

N/A

New Leak GatewayPM Ragnarlocker

Discovery Date: 2021-06-05

N/A

NEW Links for ADATA Ragnarlocker

Discovery Date: 2021-05-26

N/A

ADATA LEAKED Ragnarlocker

Discovery Date: 2021-05-25

N/A

ADATA Ragnarlocker

Discovery Date: 2021-05-01

N/A

Webhelp's company - XtraSource Ragnarlocker

Discovery Date: 2021-02-08

N/A

Ludwig Pfeiffer Leaked Ragnarlocker

Discovery Date: 2021-01-26

N/A

Grupo SADA Leak Ragnarlocker

Discovery Date: 2020-12-24

N/A

New Data Leak post from Chemical company Ragnarlocker

Discovery Date: 2020-12-23

N/A

Kaye/Bassman International - New "Wall of Shamer" Ragnarlocker

Discovery Date: 2020-12-18

N/A

Cornerstone-BB Group Leaked Ragnarlocker

Discovery Date: 2020-12-14

N/A

Attention, Dassault Falcon Jet updated Ragnarlocker

Discovery Date: 2020-12-13

N/A

Advertising Material: Forest Construction Leaked Ragnarlocker

Discovery Date: 2020-12-12

N/A

LEAK Post Campari Group Ragnarlocker

Discovery Date: 2020-12-10

N/A

Updates with files in EastCoastSeafood Inc. Ragnarlocker

Discovery Date: 2020-12-10

N/A

New "WallofShamer" - East Coast Seafood Inc. Ragnarlocker

Discovery Date: 2020-12-10

N/A

Shasun Chemicals & Drugs Ltd. LEAK Ragnarlocker

Discovery Date: 2020-12-06

N/A

JMA Energy LEAK Ragnarlocker

Discovery Date: 2020-12-05

N/A

New Files For Leak Campari Post Ragnarlocker

Discovery Date: 2020-11-30

N/A

Ragnar_Team Announce of Potential "WallofShamer" Ragnarlocker

Discovery Date: 2020-11-10

N/A

LEAK Post CAPCOM Ragnarlocker

Discovery Date: 2020-11-08

N/A

LEAK post FINSA Ragnarlocker

Discovery Date: 2020-11-08

N/A

Campari Group Ragnarlocker

Discovery Date: 2020-11-01

N/A

Official appeal to DASSAULT FALCON JET Ragnarlocker

Discovery Date: 2020-11-01

N/A

DASSAULT FALCON JET Ragnarlocker

Discovery Date: 2020-10-30

N/A

Security breach of CAPCOM network Ragnarlocker

Discovery Date: 2020-10-20

N/A

Security breach of Campari Group network Ragnarlocker

Discovery Date: 2020-10-08

N/A

CMA CGM (french carrier, container line) Ragnarlocker

Discovery Date: 2020-09-28

N/A

BIOLOGICAL E. Ltd. (BE) LEAK POST Ragnarlocker

Discovery Date: 2020-09-27

N/A

Insignia Environmental company. Ragnarlocker

Discovery Date: 2020-07-13

N/A

Astro Industries, Inc. Ragnarlocker