Netwalker

Inactive
NetWalker ransomware group operates by the threat actor known as "CIRCUS SPIDER". The NetWalker ransomware was discovered in 2019. The group mainly targeting the Asia Pacific region but can attack globally. The group uses common attacking tools like Mimikatz and other legitimate tools (LOLBINS) like PSTools, AnyDesk, TeamViewer, NLBrute, and more. The group knowing by targeting the healthcare sector. Finally, in January 2021, Netwalker was takedown by the authorities, the police have confiscated hundreds of thousands of dollars in ransom payments collected by the Netwalker group, and they seized servers and disrupted the infrastructure and the darknet websites of the Netwalker ransomware group.
26 Victims
Jan 30, 2020 First Discovered
Dec 11, 2020 Last Discovered
2150 Days Inactive
0% Infostealer
0/1 Sites Online
Known Locations (1)
rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
Tools Used
CredentialTheft
Mimikatz, ProcDump
DiscoveryEnum
AdFind
LOLBAS
PsExec
Offsec
Cobalt Strike
Intelligence
Victims (26)

Detailed victim list temporarily unavailable

This group has 26 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.