Helldown

Inactive

Helldown is an aggressive ransomware group first documented in August 2024, known for exploiting Zyxel firewall vulnerabilities to gain initial access and conducting large-scale data exfiltration averaging 70 GB per victim, targeting IT services, telecommunications, manufacturing, and healthcare primarily in the US.

36 Victims

Aug 4, 2024 First Discovered

Nov 6, 2024 Last Discovered

633 Days Inactive

0% Infostealer

0/2 Sites Online

Top Countries

US 9

DE 4

IT 3

FR 2

CH 2

GB 2

LB 2

PL 2

JP 1

RU 1

Top Sectors

Professional Services 9

Healthcare 6

Manufacturing 6

Technology 5

Retail & E-Commerce 3

Energy & Utilities 3

Transportation 2

Government & Defense 1

Financial Services 1

Known Locations (2)

Helldown Leaks

onyxcgfg4pjevvp5h34zvhaj45kbft3dg5r33j5vu3nyp7xic3vrzvad.onion

Helldown Leaks

onyxcym4mjilrsptk5uo2dhesbwntuban55mvww2olk5ygqafhu3i3yd.onion

Tools Used

CredentialTheft

Mimikatz

DefenseEvasion

HRSword

DiscoveryEnum

Advanced Port Scanner

LOLBAS

PsExec

RMM-Tools

TeamViewer

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (36)

AMERICANVENTURE

US Professional Services Discovered: Nov 6, 2024 · Attack est.: Nov 6, 2024

americanventures.com

CSIKBS

JP Retail & E-Commerce Discovered: Nov 6, 2024 · Attack est.: Nov 6, 2024

www.csikitchenandbath.com

SMARTS-ENGINEER

RU Technology Discovered: Nov 6, 2024 · Attack est.: Oct 27, 2024

www.smarts-engineering.de

lacliniqueducoureur

CA Healthcare Discovered: Nov 6, 2024 · Attack est.: Oct 24, 2024

lacliniqueducoureur.com

TIVOLI-33

FR Healthcare Discovered: Nov 6, 2024 · Attack est.: Oct 22, 2024

tivoli-33.org

qualiform.cz

CZ Manufacturing Discovered: Nov 6, 2024 · Attack est.: Oct 21, 2024

www.qualiform.cz

children

IN Retail & E-Commerce Discovered: Nov 6, 2024 · Attack est.: Oct 11, 2024

generaldentistryforchildren.com

VALLEYFIRM

HK Professional Services Discovered: Nov 6, 2024 · Attack est.: Oct 10, 2024

valleyfirm.com

SANJACINTOCOUNY

US Government & Defense Discovered: Nov 6, 2024 · Attack est.: Oct 10, 2024

www.co.san-jacinto.tx.us

compassfs

US Financial Services Discovered: Nov 6, 2024 · Attack est.: Oct 10, 2024

www.compassfs.net

knoxlawcenter

US Professional Services Discovered: Nov 6, 2024 · Attack est.: Oct 9, 2024

www.knoxlawcenter.com

hausdesstiftens.org

DE Healthcare Discovered: Nov 6, 2024 · Attack est.: Oct 7, 2024

hausdesstiftens.org

fuelco

Energy & Utilities Discovered: Nov 6, 2024 · Attack est.: Sep 30, 2024

fuelco-us.com

nightnurse.ch

CH Healthcare Discovered: Nov 6, 2024 · Attack est.: Sep 12, 2024

www.nightnurse.ch

klinkamkurpark

DE Healthcare Discovered: Nov 6, 2024 · Attack est.: Aug 26, 2024

klinik-am-kurpark.de

HBGJEWISHCOMMUN

US Retail & E-Commerce Discovered: Aug 24, 2024 · Attack est.: Aug 24, 2024

www.jewishharrisburg.org

barryavenueplating

US Manufacturing Discovered: Aug 23, 2024 · Attack est.: Aug 23, 2024

www.barryavenueplating.com

kbosecurity.co.uk

GB Professional Services Discovered: Aug 21, 2024 · Attack est.: Aug 21, 2024

kbosecurity.co.uk

khonaysser.com

LB Energy & Utilities Discovered: Aug 21, 2024 · Attack est.: Aug 21, 2024

khonaysser.com

BARRYAVEPLATING

US Manufacturing Discovered: Aug 21, 2024 · Attack est.: Aug 21, 2024

BARRYAVEPLATING

RSK-IMMOBILIEN

DE Professional Services Discovered: Aug 21, 2024 · Attack est.: Aug 21, 2024

RSK-IMMOBILIEN

ATP

IT Professional Services Discovered: Aug 20, 2024 · Attack est.: Aug 20, 2024

atpsassari.it

Khonaysser

LB Energy & Utilities Discovered: Aug 19, 2024 · Attack est.: Aug 19, 2024

Khonaysser

kbo

GB Technology Discovered: Aug 18, 2024 · Attack est.: Aug 18, 2024

Here's something encrypted, password is required to continue reading.

zyxel

NL Technology Discovered: Aug 17, 2024 · Attack est.: Aug 17, 2024

Zyxel.eu is a European branch of Zyxel Communications Corporation, a global leader in networking solutions. It specializes in providing innovative and reliable internet connectivity products and services, including routers, switches,...

cincinnatipainphysicians

US Healthcare Discovered: Aug 22, 2024 · Attack est.: Aug 14, 2024

www.cincinnatipainphysicians.com

SCHLATTNER

DE Manufacturing Discovered: Aug 13, 2024 · Attack est.: Aug 13, 2024

deganis

FR Professional Services Discovered: Aug 13, 2024 · Attack est.: Aug 13, 2024

hugwi

CH Technology Discovered: Aug 13, 2024 · Attack est.: Aug 12, 2024

Hugwi.ch is a Swiss-based company specializing in providing cutting-edge digital solutions, with a focus on web development, e-commerce, and custom software. They offer tailored services to businesses, enhancing their online...

briju

PL Professional Services Discovered: Aug 13, 2024 · Attack est.: Aug 10, 2024

vindix

PL Technology Discovered: Aug 13, 2024 · Attack est.: Aug 10, 2024

Albatros

IT Manufacturing Discovered: Aug 13, 2024 · Attack est.: Aug 10, 2024

AZIENDA TRASPORTI PUBBLICI S.P.A.

IT Transportation Discovered: Aug 13, 2024 · Attack est.: Aug 9, 2024

cbmm

BR Manufacturing Discovered: Aug 13, 2024 · Attack est.: Aug 8, 2024

XPERT Business Solutions GmbH

AT Professional Services Discovered: Aug 13, 2024 · Attack est.: Aug 4, 2024

MyFreightWorld

US Transportation Discovered: Aug 13, 2024 · Attack est.: Aug 4, 2024