IMNCrew

Inactive

IMN Crew is a data extortion and ransomware group that emerged in late March 2025, primarily targeting financial services organizations in the US, Croatia, and Indonesia by exploiting exposed perimeter services such as firewalls and VPNs, claiming at least five victims.

12 Victims

May 5, 2025 First Discovered

Sep 16, 2025 Last Discovered

410 Days Inactive

0% Infostealer

0/1 Sites Online

Known Locations (1)

IMN Crew#

imncrewwfkbjkhr2oylerfm5qtbzfphhmpcfag43xc2kfgvluqtlgoid.onion

Tools Used

CredentialTheft

LaZagne

Exfiltration

Restic

Victims (12)

Detailed victim list temporarily unavailable

This group has 12 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.