Everest

Active
Everest ransom group collects and analyzes information about their victims. They specialize in customer privacy data, financial information, databases, credit card information, and more. The Everest ransom group leaks the victim's data to the darknet and they announced that any victim that will not contact them will suffer from a data leak and they will not delete hist files for future usage.
398 Victims
Sep 9, 2021 First Discovered
Sep 7, 2026 Last Discovered
9 Days Inactive
0% Infostealer
2/2 Sites Online
Known Locations (2)
ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion
Everest
everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion
Tools Used
CredentialTheft
ProcDump
DiscoveryEnum
SoftPerfect NetScan
Offsec
Cobalt Strike, Metasploit, Meterpreter
RMM-Tools
AnyDesk, Atera, Splashtop
Intelligence
Victims (398)

Detailed victim list temporarily unavailable

This group has 398 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.