Apt73

Active

A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field.

According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit.
Source: https://github.com/crocodyli/ThreatActors-TTPs

157 Victims

Apr 5, 2024 First Discovered

Jul 24, 2026 Last Discovered

55 Days Inactive

0% Infostealer

6/11 Sites Online

Known Locations (11)

APT73

fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion

qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onion

BASHE

bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion

BASHE

basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion

APT73

wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion

APT73

eraleignews.com

APT73

apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onion

BASHE

bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion

BASHE

basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion

bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion

BASHE

basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion

Victims (157)

Detailed victim list temporarily unavailable

This group has 157 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.