Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ulose

| Active

None

Victims
6
 
First Victim
2026-06-09
(est. attack date)
Discovery Date
2026-06-09
 
Last Seen
2026-09-30
 
Inactive Since
2
days
Avg Delay
N/A
attack→claim
Infostealer
50.0%
victims with domain
Countries
1
hit
Uptime
97.9% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN Status
favicon ULOSE Yes 2026-10-02T12:15:53 NGINX nginx 1.26.3 egm34gsyx65wb6jyqds4esvkskl34barx4robuebjhqpc4dfeavg7fyd.onion

Target
Top 5 Activity Sectors
  • Financial Services 3
  • Healthcare 1
  • Manufacturing 1
Top 5 Countries
  • KR flag Korea, Republic of 6

Heatmap

Indicators of Compromise (IoCs) (1)
Tox 1
Type IOC
Tox 7FD474DA4CEE6D3B331AA5B0E04997FBE296435619920EAE2FCE4D176DB4F515B978E46FDA50 B6EA3F82D3957B07619753D5EF7E68C4C9E618756D9922B254D69353823DDF78C12135A564FE

Victims (6)
Logo
Discovered: 2026-09-30 (2d ago)
Country: Korea | Status: Sale…
Logo
Discovered: 2026-06-09 (3mo ago)
No description available
Logo
Discovered: 2026-06-09 (3mo ago)
We have all customer`s data of KyungRok country: South Korea status: public…
Logo
Discovered: 2026-06-09 (3mo ago)
We have all data of nrcapital company. 1TB. country: South Korea status: private…
Logo
Discovered: 2026-06-09 (3mo ago)
We have all customer`s data of HanDok country: South Korea status: public…
Logo
Discovered: 2026-06-09 (3mo ago)
We have all PDM Server`s data of HIZEAERO Company, partner Boeing. 1TB country: South Korea status: …