Karma

Active

Karma is a ransomware group first observed in mid-2021, part of a lineage tracing back through Nefilim and FiveHands, operating double-extortion attacks against enterprises in healthcare, manufacturing, and technology; the group was managed by threat actor "farnetwork" who ran multiple RaaS programs across related strains. Platforms: Windows and Linux

7 Victims

Oct 4, 2021 First Discovered

Oct 4, 2021 Last Discovered

1808 Days Inactive

0% Infostealer

1/2 Sites Online

Top Sectors

Technology 3

Manufacturing 2

Retail & E-Commerce 1

Known Locations (2)

Karma Leaks — Exclusive Leaks & Intelligence

2dmzkuruwpmgalhcn26kmvlg37ijqbzqo3orhxwvyf2nf3w4gfq6ikid.onion

Karma Leaks

3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (7)

Our first post

Discovered: Oct 4, 2021 · Attack est.: Oct 4, 2021

Saurer. Part 1.

Manufacturing Discovered: Oct 4, 2021 · Attack est.: Oct 4, 2021

Align Technology. Part 1.

Technology Discovered: Oct 4, 2021 · Attack est.: Oct 4, 2021

The next leak will be of a multi billion dollar cosmetics and fragrance company.

Retail & E-Commerce Discovered: Oct 4, 2021 · Attack est.: Oct 4, 2021

Align Technology. Part 2.

Technology Discovered: Oct 4, 2021 · Attack est.: Oct 4, 2021

SI Group. Part 1.

Manufacturing Discovered: Oct 4, 2021 · Attack est.: Oct 4, 2021

YASH Technologies. Part 1.

Technology Discovered: Oct 4, 2021 · Attack est.: Oct 4, 2021