DYSPHOR1A

Active
Suspicious group. We did not manage to confirm any victims.
11 Victims
Aug 20, 2026 First Discovered
Sep 6, 2026 Last Discovered
38 Days Inactive
0% Infostealer
2/3 Sites Online
Top Countries
MM 6
TH 2
FR 1
IN 1
ID 1
Top Sectors
Education 3
Government & Defense 2
Financial Services 2
Technology 2
Transportation 1
Professional Services 1
Known Locations (3)
Chrome Dino Game
normalhunters0x.surge.sh
DYSPHOR1A Ransomware Group
y3maveiwszbnrziufbbberx74cvrdcsf72nxzuqxzv7ppdmmqzffazid.onion
DNS Resolution Error - Domain Not Found, Or Domain not added to hosting account
null.yzz.me
Victims (11)
RTAD GOV MM
MM Government & Defense Discovered: Sep 6, 2026 · Attack est.: Sep 6, 2026
Road Transport Administration Department (RTAD) — official government portal providing public transport services, driving license issuance, vehicle registration, and safety regulations. Full databases dump total 1.08 GB. Victim domain https://rtad.gov.mm.
CitizensPay
MM Financial Services Discovered: Sep 5, 2026 · Attack est.: Sep 5, 2026
Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information...
MBT Telecom
MM Technology Discovered: Sep 4, 2026 · Attack est.: Sep 4, 2026
Myanmar Broadband Telecom Co., Ltd. (MBT) is a leading fiber internet service provider and telecommunications network solutions company established in Myanmar in 2013. Full database compromise exposing 209,970 user records...
Netim Company
FR Technology Discovered: Aug 23, 2026 · Attack est.: Aug 23, 2026
Netim is a French domain name registrar and web hosting provider. Full compromise of internal systems — source code, infrastructure IPs, payment processing databases, customer PII, and internal business data.
Yoma Fleet
MM Transportation Discovered: Aug 21, 2026 · Attack est.: Aug 21, 2026
Yoma Fleet is a leading vehicle operating lease, rental, and financing company based in Yangon, Myanmar. The platform provides centralized administration and management for vehicle orders, employee financing, repayments, users,...
The University of Delhi (DU)
IN Education Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral...
AYUDHYA TH Insurance
TH Financial Services Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Leaked data from AYUDHYA (TH Insurance / Allianz Thailand). Internal batch-control system used within the financial/transaction batch-processing ecosystem behind the Allianz customer-facing web platform. Includes admin credentials (TBH2CASH:AAbb1234).
GUSTO College GLMS
TH Education Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com.
Indonesian Police Database
ID Government & Defense Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Database containing records of 52,000 Indonesian police officers including email addresses, phone numbers, first and last names, passwords, location details, and 4,000 facial photographs.
Job Net .COM.MM
MM Professional Services Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information, user accounts, and business operations data.
Strategy First International College
MM Education Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data.