Benzona

Inactive

Benzona is a financially motivated ransomware group that emerged in late 2024, targeting small to mid-sized organizations across manufacturing, healthcare, technology, and hospitality sectors using double-extortion tactics — encrypting files while exfiltrating data and threatening publication via a Tor-based leak site.

14 Victims

Nov 26, 2025 First Discovered

Jan 30, 2026 Last Discovered

139 Days Inactive

14.3% Infostealer

0/2 Sites Online

Top Countries

RO 4

GT 1

FR 1

TZ 1

IR 1

IN 1

TW 1

CI 1

Top Sectors

Healthcare 3

Manufacturing 2

Hospitality and Tourism 1

Technology 1

Consumer Services 1

Known Locations (2)

Support Chat

rwsu75mtgj5oiz3alkfpnxnopcbiqed6wllyoffpuruuu6my6imjzuqd.onion

Benzona Ransomware

benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd.onion

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (14)

casamedica.com.gt

GT Healthcare Discovered: Jan 30, 2026 · Attack est.: Jan 30, 2026

[AI generated] "Casamedica.com.gt" is a Guatemala-based company that provides a range of medical equipment and supplies. Their product range includes everything from surgical instruments to hospital furniture and diagnostic equipment....

empreinte-hotel.com

FR Hospitality and Tourism Discovered: Jan 22, 2026 · Attack est.: Jan 22, 2026

[AI generated] The Empreinte Hotel is a luxury establishment located in Orleans, France. This 4-star hotel is situated alongside the Loire River, providing guests with charming views. The hotel comprises...

*a*ame*i*a.com.g*

Discovered: Jan 22, 2026 · Attack est.: Jan 22, 2026

ccbrt.org

TZ Healthcare Discovered: Jan 17, 2026 · Attack est.: Jan 17, 2026

[AI generated] Comprehensive Community Based Rehabilitation in Tanzania (CCBRT) is a healthcare organization that operates primarily in Tanzania. The organization aims to provide affordable, high-quality healthcare services to the local...

em***int*-ho***.com

Discovered: Jan 17, 2026 · Attack est.: Jan 17, 2026

cc***.or.*z

Discovered: Jan 12, 2026 · Attack est.: Jan 12, 2026

taminsho.com

IR Discovered: Dec 22, 2025 · Attack est.: Dec 22, 2025

[AI generated] N/A

platinumone.in

IN Technology Discovered: Dec 6, 2025 · Attack est.: Dec 6, 2025

[AI generated] PlatinumOne.in is a company based in India that provides outsourced sales force services for various industries such as telecom services, financial services, and consumer goods. They have an...

SUNNYGO.COM.TW

TW Consumer Services Discovered: Dec 3, 2025 · Attack est.: Dec 3, 2025

[AI generated] "SUNNYGO.COM.TW" is an online retailer based in Taiwan. The company specializes in the sales and distribution of a broad range of products across various categories. These include electronics,...

suzuki-ploiesti.ro

RO Manufacturing Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025

[AI generated] N/A

poliserv.ro

RO Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025

[AI generated] N/A

mazda-ploiesti.ro

RO Manufacturing Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025

[AI generated] N/A

dacia-ploiesti.ro

RO Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025

[AI generated] N/A

sevci.org

CI Healthcare Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025

Santé, Espoir et Vie, dans un système de soin fort