Darkvault

Active
DarkVault is a data-exfiltration and double-extortion group first identified in late 2023, targeting medium-to-large organizations in finance, professional services, legal, and technology sectors across Europe, the UK, and North America, with a suspected connection to LockBit.
55 Victims
Feb 7, 2024 First Discovered
Jan 6, 2025 Last Discovered
618 Days Inactive
0% Infostealer
1/2 Sites Online
Known Locations (2)
DarkVault BLOG
mdhby62yvvg6sd5jmx5gsyucs7ynb5j45lvvdh4dsymg43puitu7tfid.onion
DarkVault
tx23pk4zw5qynq3tmfk2jz5zbel63p4nwvkheswze7r6gzxhzcbseyad.onion
Victims (55)

Detailed victim list temporarily unavailable

This group has 55 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.