Ransomware.live 👀

sk.com

Ransomware Group:

Discovery Date: 2025-04-10 11:11

Over 1 TB of files downloaded from their servers . Company has 48 hours to contact us before we publish the data . In the U.S., SK is investing in businesses and expanding our local operations in electric vehicle batteries, life sciences, tec ...

Victim: | Group:

KHAZMODAN STUDIOS

Ransomware Group:

Nightspire

Discovery Date: 2025-03-25 06:34

Estimated Attack Date: 2025-03-22

Sector: Not Found

KHAZMODAN STUDIOS(Korea)

Victim: | Group:

Ministry Of Defense of the Republic Of Korea

Ransomware Group:

Babuk2

Discovery Date: 2025-03-16 23:46

Sector: Public Sector

Ministry Of Defense of the Republic Of Korea

Victim: | Group:

METOOSHOES.COM

Ransomware Group:

Clop

Discovery Date: 2025-02-27 16:43

Sector: Consumer Services

[AI generated] METOOSHOES.COM is a dedicated online platform providing a wide range of shoes for both men and women. The company offers an assortment of different styles from boots, sandals, to high heels and sneakers, among others. Charmingly designed and crafted for comfort, collectors and fashion enthusiasts alike can choose from their vast array of unique and trendy shoe designs.

Victim: | Group:

Shinsung Delta Tech

Ransomware Group:

Lynx

Discovery Date: 2025-02-05 18:57

Sector: Manufacturing

Coming soon...

Victim: | Group:

iptime.com

Ransomware Group:

Funksec

Discovery Date: 2025-01-22 15:15

Sector: Technology

[AI generated] Iptime.com is a Korean-based company specializing in Internet solutions. It is a renowned brand primarily known for manufacturing and supplying networking hardware products like modems, routers, and access points to both commercial and domestic markets. Its offerings also include network storage devices, network cameras, and wireless connectivity products to enhance internet connectivity and security.

Victim: | Group:

Simmtech Co., Ltd.

Ransomware Group:

Underground

Discovery Date: 2024-12-16 13:58

Sector: Technology

Revenue:$ 760M - Country :South Korea

Victim: | Group:

k-boss.net

Ransomware Group:

Dragonransomware

Discovery Date: 2024-12-15 09:54

Estimated Attack Date: 2024-12-06

Sector: Not Found

**🫠 Oops, K-BOSS been hacked 🔥 [+] K-BOSS is a spatial survey system that allows users to create and distribute location-based surveys online. The collected data is analyzed and visualized in 2D or 3D for efficient results. [+] ****k-boss.net**** Dragons 💟.**

Victim: | Group:

inthinking.net

Ransomware Group:

Darkvault

Discovery Date: 2024-11-20 15:14

Sector: Education

InThinking is an innovative educational technology and training company which provides web-based resources and high quality training for IB World Schools. With more than 20 years experience, we are particularly committed to promoting critical thinking across the curriculum.

Victim: | Group:

www.kiswire.com

Ransomware Group:

Ransomhub

Discovery Date: 2024-12-03 18:36

Estimated Attack Date: 2024-11-16

Sector: Manufacturing

[AI generated] Kiswire is a global company specializing in the manufacturing of steel wire products. Established in South Korea, it focuses on producing high-quality steel wires for various industries, including automotive, construction, and telecommunications. Kiswire is renowned for its innovation, advanced technology, and commitment to quality, maintaining a strong presence in the international market.

Victim: | Group:

SK Gas

Ransomware Group:

Raworld

Discovery Date: 2024-11-12 20:15

Sector: Energy

[AI generated] SK Gas is a South Korean company primarily involved in the liquefied petroleum gas (LPG) industry. It is a subsidiary of the SK Group, one of South Korea's largest conglomerates. SK Gas operates in the import, storage, and distribution of LPG, serving both domestic and international markets. The company also engages in energy-related services and infrastructure development, focusing on sustainable and innovative energy solutions.

Victim: | Group:

mmpunion.com

Ransomware Group:

Eldorado

Discovery Date: 2024-10-28 18:17

Sector: Business Services

[IA generated] I'm sorry, but I don't have specific information about "mmpunion.com." It's possible that it's a smaller or less well-known company, or that it falls outside the scope of available data. For detailed and accurate information, I recommend checking the company's official website or searching for recent articles or reviews about them.

Victim: | Group:

K***N Corp

Ransomware Group:

Flocker

Discovery Date: 2024-10-10 01:33

Sector: Not Found

To the board of K***N, We have gained access to your system at K***N.com and have procured highly confidential data, […]

Group:

seoulpi.io

Ransomware Group:

Killsec

Discovery Date: 2024-10-05 23:34

Sector: Not Found

Seoul Property Insight (SPI) is a prominent player in the South Korean real estate sector, dedicated to providing comprehensive insights and analysis on commercial real estate investments.

Victim: | Group:

Nova Sinseg

Ransomware Group:

Arcusmedia

Discovery Date: 2024-09-24 10:34

Sector: Not Found

Novasinseg.com.brNova Sinseg is a company that...

Victim: | Group:

kumhotire.com

Ransomware Group:

Lockbit3

Discovery Date: 2024-09-26 19:09

Estimated Attack Date: 2024-08-25

Sector: Manufacturing

Kumho Tire (formerly known as Samyang Tire) is a South Korean tire manufacturer. Kumho Tire was previously operated as a business unit of the Kumho Asiana Group. Since 2018, it is a subsidiary of Chinese tire conglomerate Doublestar. Encrypted up...

Victim: | Group:

www.seaeng.com

Ransomware Group:

Dan0n

Discovery Date: 2024-08-23 08:44

Sector: Business Services

tahly Engineering & Associates, Inc. was established in 1970. The firm is headquartered in Helena, Montana with a branch office in Bozeman, Montana. Employees provide service in the fields of transpor...

Victim: | Group:

peoplewell.com

Ransomware Group:

Darkvault

Discovery Date: 2024-08-17 22:21

Sector: Healthcare

PeopleWell Solutions is a single platform HR system built to reduce the time and effort it takes for your HR team to administer HR tasks, payroll, benefits, reports and reconciliation.

Victim: | Group:

Hanon Systems

Ransomware Group:

Hunters

Discovery Date: 2024-08-11 07:00

Sector: Manufacturing

Country : South Korea - Exfiltraded data : yes - Encrypted data : yes

Victim: | Group:

suandco.com

Ransomware Group:

Madliberator

Discovery Date: 2024-08-07 14:35

Sector: Business Services

Suandco tiene su origen en el despacho fundado en 1951 por Don Francisco Suarez Sotillo, abogado e Inspector de Hacienda. Uno de los primeros despachos de Madrid especializados en Derecho Tributario. Llevamos tres generaciones asesorando familias y empresas que han depositado su confianza en nosotros. Por que? Porque aquilas personas nos importan y son el centro de nuestra profesion.

Victim: | Group:

wave2.co.kr

Ransomware Group:

Darkvault

Discovery Date: 2024-06-10 13:48

Sector: Technology

eWave Corp.'s Precision Agriculture/Livestock Tech is a customized livestock farming technology for the 4th Industrial Revolution era that provides a farm monitoring and control system through an integrated process.

Victim: | Group:

Samhwa Paint Ind. Ltd

Ransomware Group:

8base

Discovery Date: 2024-04-03 05:54

Sector: Manufacturing

Samhwa Paint Industrial Co., Ltd. is a Korea-based company engaged in the manufacturing of paints.samhwa.com

Victim: | Group:

Deepnoid

Ransomware Group:

Raworld

Discovery Date: 2024-03-21 00:35

Sector: Technology

Victim: | Group:

airbogo

Ransomware Group:

Stormous

Discovery Date: 2024-03-05 20:45

Sector: Transportation/Logistics

?

Victim: | Group:

kc.co.kr

Ransomware Group:

Underground

Discovery Date: 2024-05-03 08:23

Estimated Attack Date: 2024-02-23

Sector: Technology

Revenue:$650M - Country :South Korea

Victim: | Group:

ukseung.co.kr

Ransomware Group:

Lockbit3

Discovery Date: 2023-08-29 19:03

Sector:

Manufacturing of inorganic pigments

Victim: | Group:

Softverg Co., Ltd.

Ransomware Group:

Noescape

Discovery Date: 2023-08-22 01:04

Estimated Attack Date: 2023-08-18

Sector:

Softverg Co., Ltd. is a young company that transactswith leading domestic companies through domestic and foreign software partnerships (microsoft enterprise partner, Hancom Large partner, erwin master reseller, Ahn Lab d...

Victim: | Group:

nts.go.kr

Ransomware Group:

Lockbit3

Discovery Date: 2023-03-29 13:35

Sector:

Victim: | Group:

Hyundai Samho Heavy Industries Co.,Ltd. (South Korea)

Ransomware Group:

Hive

Discovery Date: 2022-02-25 14:52

Sector: Manufacturing

Group:

Hanon Systems

Ransomware Group:

Snatch

Discovery Date: 2022-01-13 19:25

Sector: Automotive

Hanon Systems manufactures a variety of automotive air control equipment. The Company's products include air conditioners, heaters, cooling modules, compressors, radiators, fans, evaporators, and condensers. Hanon Systems distributes its products on an original equipment manufacturing (OEM) basis.

Victim: | Group:

atskorea.co.kr

Ransomware Group:

Lockbit2

Discovery Date: 2021-12-22 17:36

Sector:

Group:

Short Name	Full Name	Email Contact	Sector
Bithumb-CERT	Bithumb	whistle bithumbcorp.com	Other commercial
ECSC	Education Cyber Security Center	ecsc-team ecsc.go.kr	Research & education
FSI-CERT	Financial Security Institute - Computer Emergency Response Team	cert fsec.or.kr	Financial sector
IGLOO-CERT	IGLOO SECURITY - Cyber Emergency Response Team	first-team igloosec.com	Other commercial
KN-CERT	Korea National Computer Emergency Response Team	kn-cert ncsc.go.kr	Government & military
KrCERT/CC	KrCERT/CC	first-team krcert.or.kr	No Data
NAVER-CSIRT	NAVER Cloud Computer Security Incident Response Team	dl_naver-csirt navercorp.com	Other commercial
NHN Cloud-CSIRT	NHN Cloud Computer Security Incident Response Team	cl00003614 nhn.com	Industrial sector
NIRS-CERT	National Information Resources Service Computer Emergency Response Team	nirscert korea.kr	Government & military

sk.com

KHAZMODAN STUDIOS

Ministry Of Defense of the Republic Of Korea

METOOSHOES.COM

Shinsung Delta Tech

iptime.com

Simmtech Co., Ltd.

k-boss.net

inthinking.net

www.kiswire.com

SK Gas

mmpunion.com

K***N Corp

seoulpi.io

Nova Sinseg

kumhotire.com

www.seaeng.com

peoplewell.com

Hanon Systems

suandco.com

wave2.co.kr

Samhwa Paint Ind. Ltd

Deepnoid

airbogo

kc.co.kr

ukseung.co.kr

Softverg Co., Ltd.

nts.go.kr

Hyundai Samho Heavy Industries Co.,Ltd. (South Korea)

Hanon Systems

atskorea.co.kr

TTPs information for this group:

Infostealer information available for

Icon Legend

CERTs/CSIRTs Contact Information for Korea, Republic of