← Back to Ransomware Chk

Benzona

Active
Benzona is a financially motivated ransomware group that emerged in late 2024, targeting small to mid-sized organizations across manufacturing, healthcare, technology, and hospitality sectors using double-extortion tactics — encrypting files while exfiltrating data and threatening publication via a Tor-based leak site.
14 Victims
Nov 26, 2025 First Discovered
Jan 30, 2026 Last Discovered
93 Days Inactive
14.3% Infostealer
1/2 Sites Online
Top Countries
RO 4
GT 1
FR 1
TZ 1
IR 1
IN 1
TW 1
CI 1
Top Sectors
Healthcare 3
Manufacturing 2
Hospitality and Tourism 1
Technology 1
Consumer Services 1
Known Locations (2)
Support Chat
rwsu75mtgj5oiz3alkfpnxnopcbiqed6wllyoffpuruuu6my6imjzuqd.onion
Benzona Ransomware
benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd.onion
Victims (14)
casamedica.com.gt
GT Healthcare Discovered: Jan 30, 2026 · Attack est.: Jan 30, 2026
[AI generated] "Casamedica.com.gt" is a Guatemala-based company that provides a range of medical equipment and supplies. Their product range includes everything from surgical instruments to hospital furniture and diagnostic equipment....
empreinte-hotel.com
FR Hospitality and Tourism Discovered: Jan 22, 2026 · Attack est.: Jan 22, 2026
[AI generated] The Empreinte Hotel is a luxury establishment located in Orleans, France. This 4-star hotel is situated alongside the Loire River, providing guests with charming views. The hotel comprises...
*a*ame*i*a.com.g*
Discovered: Jan 22, 2026 · Attack est.: Jan 22, 2026
ccbrt.org
TZ Healthcare Discovered: Jan 17, 2026 · Attack est.: Jan 17, 2026
[AI generated] Comprehensive Community Based Rehabilitation in Tanzania (CCBRT) is a healthcare organization that operates primarily in Tanzania. The organization aims to provide affordable, high-quality healthcare services to the local...
em***int*-ho***.com
Discovered: Jan 17, 2026 · Attack est.: Jan 17, 2026
cc***.or.*z
Discovered: Jan 12, 2026 · Attack est.: Jan 12, 2026
taminsho.com
IR Discovered: Dec 22, 2025 · Attack est.: Dec 22, 2025
[AI generated] N/A
platinumone.in
IN Technology Discovered: Dec 6, 2025 · Attack est.: Dec 6, 2025
[AI generated] PlatinumOne.in is a company based in India that provides outsourced sales force services for various industries such as telecom services, financial services, and consumer goods. They have an...
SUNNYGO.COM.TW
TW Consumer Services Discovered: Dec 3, 2025 · Attack est.: Dec 3, 2025
[AI generated] "SUNNYGO.COM.TW" is an online retailer based in Taiwan. The company specializes in the sales and distribution of a broad range of products across various categories. These include electronics,...
suzuki-ploiesti.ro
RO Manufacturing Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025
[AI generated] N/A
poliserv.ro
RO Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025
[AI generated] N/A
mazda-ploiesti.ro
RO Manufacturing Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025
[AI generated] N/A
dacia-ploiesti.ro
RO Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025
[AI generated] N/A
sevci.org
CI Healthcare Discovered: Nov 26, 2025 · Attack est.: Nov 26, 2025
Santé, Espoir et Vie, dans un système de soin fort