Bert

Inactive
BERT is a newly emerged ransomware group first identified in mid-2025, targeting Windows and Linux platforms across healthcare, technology, and event services sectors in Asia, Europe, and the US, with ransomware derived from a Linux variant of REvil using AES encryption and multi-threaded file locking.
7 Victims
Apr 4, 2025 First Discovered
Jun 10, 2025 Last Discovered
509 Days Inactive
0% Infostealer
0/1 Sites Online
Known Locations (1)
BERT
bertblogsoqmm4ow7nqyh5ik7etsmefdbf25stauecytvwy7tkgizhad.onion
Intelligence
📄 1 Ransom Notes
View the actual ransom notes used by this group →
Victims (7)

Detailed victim list temporarily unavailable

This group has 7 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.

Source: Ransomware.live | Data cached and served by Digital Checkmark IT Services | Ransomware Tracker