Grief

Inactive

Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files. It is recognizable by its trademark file extension added to encrypted files: .doppeled. It also creates a note file named: ".how2decrypt.txt".

3 Victims

May 25, 2021 First Discovered

Jun 29, 2021 Last Discovered

1950 Days Inactive

0% Infostealer

0/1 Sites Online

Known Locations (1)

Grief list

griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (3)

Detailed victim list temporarily unavailable

This group has 3 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.