Onyx

Inactive
Onyx is a ransomware group first observed in April 2022, based on the Chaos ransomware builder, that is notably destructive — files larger than 2MB are overwritten with random data rather than encrypted, making recovery impossible even after ransom payment — claiming approximately 13 victims across six countries.
28 Victims
Apr 29, 2022 First Discovered
Nov 21, 2022 Last Discovered
1395 Days Inactive
0% Infostealer
0/1 Sites Online
Known Locations (1)
VSOP NEWS
mrdxtxy6vqeqbmb4rvbvueh2kukb3e3mhu3wdothqn7242gztxyzycid.onion
Victims (28)

Detailed victim list temporarily unavailable

This group has 28 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.