Cipherforce

Inactive
CipherForce is a newly emerged ransomware group first detected in early 2026, operating a dark web leak site and targeting technology, business services, and logistics companies across the US, China, Vietnam, India, and UAE, with at least 6 claimed victims.
6 Victims
Feb 23, 2026 First Discovered
Feb 23, 2026 Last Discovered
205 Days Inactive
0% Infostealer
0/1 Sites Online
Known Locations (1)
CipherForce Leak Site - Victims
o3ydbkayttkyg4iw2nc732jxmmex25bjeyqyvuuyngnxmpehdefjr3qd.onion
Victims (6)

Detailed victim list temporarily unavailable

This group has 6 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.