DYSPHOR1A

Active
Suspicious group. We did not manage to confirm any victims.
8 Victims
Aug 20, 2026 First Discovered
Aug 23, 2026 Last Discovered
7 Days Inactive
40% Infostealer
3/3 Sites Online
Top Countries
MM 3
TH 2
FR 1
IN 1
ID 1
Top Sectors
Education 3
Technology 1
Transportation 1
Financial Services 1
Government & Defense 1
Professional Services 1
Known Locations (3)
DYSPHOR1A Ransomware Group
y3maveiwszbnrziufbbberx74cvrdcsf72nxzuqxzv7ppdmmqzffazid.onion
DYSPHOR1A Ransomware Group
normalhunters0x.surge.sh
// members
null.yzz.me
Victims (8)
Netim Company
FR Technology Discovered: Aug 23, 2026 · Attack est.: Aug 23, 2026
Netim is a French domain name registrar and web hosting provider. Full compromise of internal systems — source code, infrastructure IPs, payment processing databases, customer PII, and internal business data.
Yoma Fleet
MM Transportation Discovered: Aug 21, 2026 · Attack est.: Aug 21, 2026
Yoma Fleet is a leading vehicle operating lease, rental, and financing company based in Yangon, Myanmar. The platform provides centralized administration and management for vehicle orders, employee financing, repayments, users,...
The University of Delhi (DU)
IN Education Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral...
AYUDHYA TH Insurance
TH Financial Services Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Leaked data from AYUDHYA (TH Insurance / Allianz Thailand). Internal batch-control system used within the financial/transaction batch-processing ecosystem behind the Allianz customer-facing web platform. Includes admin credentials (TBH2CASH:AAbb1234).
GUSTO College GLMS
TH Education Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com.
Indonesian Police Database
ID Government & Defense Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Database containing records of 52,000 Indonesian police officers including email addresses, phone numbers, first and last names, passwords, location details, and 4,000 facial photographs.
Job Net .COM.MM
MM Professional Services Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information, user accounts, and business operations data.
Strategy First International College
MM Education Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data.