Linkc

Active

Linkc is a ransomware group first observed in February 2025, operating a Tor-based data leak site and targeting US-based AI, cloud, aerospace, and manufacturing companies — including H2O.ai — demanding ransoms as high as $15 million using double-extortion tactics.

4 Victims

Jan 29, 2025 First Discovered

Feb 27, 2026 Last Discovered

71 Days Inactive

0% Infostealer

1/1 Sites Online

Top Countries

US 4

Top Sectors

Technology 2

Manufacturing 1

Known Locations (1)

Linkc Pub

iywqjjaf2zioehzzauys3sktbcdmuzm2fsjkqsblnm7dt6axjfpoxwid.onion

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (4)

Network Technology Services of New Jersey

US Technology Discovered: Apr 8, 2026 · Attack est.: Feb 27, 2026

Whole datacenter is encrypted. Waiting for you in chat.

StrongLink

US Discovered: Apr 8, 2026 · Attack est.: Feb 3, 2026

DOWNLOAD SAMPLE: https://amber-wooden-prawn-35.mypinata.cloud/ipfs/bafybeian2lxaye6gwvi2kztzfpyr2lokzfngai3d4zjmtgqhhv74ixsvi4

Sajet Products

US Manufacturing Discovered: Apr 8, 2026 · Attack est.: Jan 30, 2026

700mb of blueprints including Amazon LEO (satellite) Project Kuiper scheme, Airbus, Boeing engines and metal alloy technologies. Enjoy. https://amber-wooden-prawn-35.mypinata.cloud/ipfs/bafybeic5m7e3dvlunitnv6vxzbcvqqgm4pybgc3ykn3jo62jipshf6bjve

h2o.ai

US Technology Discovered: Feb 19, 2025 · Attack est.: Jan 29, 2025

As a result of our operation, we have discovered the following concerning data: 1. Unanonymized customer datasets intended for AI training. 2. Full source code of programs from the Git...