Ragnarlocker

Active
Ragnar Locker was an elite ransomware group active from December 2019 to October 2023 that targeted large enterprises and critical infrastructure — including Capcom and Campari — claiming at least 168 victims before being taken down by a Europol-led international law enforcement operation in October 2023.
128 Victims
Mar 31, 2020 First Discovered
Oct 11, 2023 Last Discovered
980 Days Inactive
0% Infostealer
2/4 Sites Online
Top Countries
FR 3
GB 1
BZ 1
IT 1
US 1
PT 1
Top Sectors
Manufacturing 25
Technology 14
Agriculture and Food Production 9
Energy 9
Business Services 9
Transportation/Logistics 7
Financial Services 7
Consumer Services 6
Healthcare 5
Education 3
Known Locations (4)
rgleak7op734elep.onion
p6o7m73ujalhgkiv.onion
This site has been seized
rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion
This site has been seized
ragnarnwvli32xnmwudsvhbl7klzmofxeylyhcqfc5ifx5mbybq3ekqd.onion
Tools Used
DefenseEvasion
VirtualBox
DiscoveryEnum
Advanced Port Scanner, Dsquery, PsInfo, SoftPerfect LanSearchPro
LOLBAS
PsExec, WMIC
Offsec
Cobalt Strike
RMM-Tools
AnyDesk, Remote Manipulator System (RMS), RemoteUtilities
Intelligence
Victims (128)
Scotbeef Ltd. - Leaks
Agriculture and Food Production Discovered: Oct 11, 2023 · Attack est.: Oct 11, 2023
Eicon Controle Inteligentes
Manufacturing Discovered: Oct 11, 2023 · Attack est.: Oct 11, 2023
International Presence Ltd - Leaked
Discovered: Oct 6, 2023 · Attack est.: Oct 6, 2023
Learning Partnership West - Leaked
GB Education Discovered: Oct 5, 2023 · Attack est.: Oct 5, 2023
Groupe Fructa Partner - Leaked
Agriculture and Food Production Discovered: Oct 3, 2023 · Attack est.: Oct 3, 2023
Astre - Leaked
Discovered: Sep 30, 2023 · Attack est.: Sep 30, 2023
Network Pacific Real Estate - Leak
Discovered: Sep 30, 2023 · Attack est.: Sep 30, 2023
Stratesys Full data leak
Technology Discovered: Sep 25, 2023 · Attack est.: Sep 25, 2023
Announcement: COMECA Group going to be Leaked
Discovered: Sep 22, 2023 · Attack est.: Sep 22, 2023
Announcement: Skatax Accounting company going to be leaked
Discovered: Sep 22, 2023 · Attack est.: Sep 22, 2023
Retail House - Full Leak
Discovered: Sep 22, 2023 · Attack est.: Sep 22, 2023
Announcement: Stratesys solutions going to be leaked
Discovered: Sep 21, 2023 · Attack est.: Sep 21, 2023
Announcement: Stratesys solutions going to b
Discovered: Sep 21, 2023 · Attack est.: Sep 21, 2023
Announcement: Groupe Fructa Partner will be leaked soon
Agriculture and Food Production Discovered: Sep 19, 2023 · Attack est.: Sep 19, 2023
CITIZEN company LEAKED
Discovered: Sep 18, 2023 · Attack est.: Sep 17, 2023
Announcement: Retail House going to be LEAKED
Consumer Services Discovered: Sep 17, 2023 · Attack est.: Sep 17, 2023
Updates: Israel "MYMC"
Discovered: Sep 15, 2023 · Attack est.: Sep 15, 2023
Israel Medical Center - leaked
Healthcare Discovered: Sep 6, 2023 · Attack est.: Sep 6, 2023
DOIT - Canadian IT company allowed leak of its own clients.
Technology Discovered: Sep 2, 2023 · Attack est.: Sep 2, 2023
Batesville didn't react on appeal and allows Full Leak
Manufacturing Discovered: Aug 8, 2023 · Attack est.: Aug 8, 2023
Batesville Tool & Die, Inc will be leaked in 3 Days
Manufacturing Discovered: Jul 31, 2023 · Attack est.: Jul 31, 2023
Belize Electricity Limited - Leaked
BZ Energy Discovered: Jul 10, 2023 · Attack est.: Jul 10, 2023
Portugal Scotturb Data Leaked
Transportation/Logistics Discovered: Jul 5, 2023 · Attack est.: Jul 5, 2023
Australian Universal Crane Leak
Construction Discovered: May 28, 2023 · Attack est.: May 28, 2023
Autlan Metallorum, Mexican Miner Leak
Energy Discovered: May 18, 2023 · Attack est.: May 18, 2023
CANTALK, Canadian translation services - Leak
Business Services Discovered: Apr 25, 2023 · Attack est.: Apr 25, 2023
Public Appeal to the CANTALK management
Discovered: Mar 29, 2023 · Attack est.: Mar 29, 2023
Temporary Leak Page #0013995NTa
Discovered: Mar 29, 2023 · Attack est.: Mar 10, 2023
New Leak in lawyers company AASP.
Business Services Discovered: Mar 3, 2023 · Attack est.: Mar 3, 2023
New Leak in lawyers company.
Business Services Discovered: Mar 3, 2023 · Attack est.: Mar 3, 2023
AASP claim there was no data leakage!
Discovered: Feb 22, 2023 · Attack est.: Feb 22, 2023
Hundred thousands of personal data, leak preview
Healthcare Discovered: Dec 28, 2022 · Attack est.: Dec 28, 2022
AOAL - Azienda Ospedaliera di Alessandria
Wrapex Industrial - Leaked
Manufacturing Discovered: Dec 20, 2022 · Attack est.: Dec 20, 2022
Serena Hotels - Leaked
Hospitality and Tourism Discovered: Dec 20, 2022 · Attack est.: Dec 20, 2022
ITONCLOUD - LEAKED
Discovered: Dec 13, 2022 · Attack est.: Dec 13, 2022
Essent company - Leaked
Energy Discovered: Nov 25, 2022 · Attack est.: Nov 25, 2022
Leak Announcement - IT company ITonCLOUD
Technology Discovered: Nov 22, 2022 · Attack est.: Nov 22, 2022
Belgium company Zwijndrecht - Leaked
Discovered: Nov 16, 2022 · Attack est.: Nov 16, 2022
DURAVIT A.G. - Announcement before publishing data
Manufacturing Discovered: Oct 27, 2022 · Attack est.: Oct 27, 2022
Dollmar SpA - Leaked
Manufacturing Discovered: Oct 18, 2022 · Attack est.: Oct 18, 2022
DIPF-INTERN - Leaked
Education Discovered: Oct 18, 2022 · Attack est.: Oct 18, 2022
Fashion company ZIGI NY - Leaked
Consumer Services Discovered: Oct 13, 2022 · Attack est.: Oct 13, 2022
DMCI Holding Leaked
Discovered: Oct 10, 2022 · Attack est.: Oct 10, 2022
TANG CAPITAL LEAKED
Financial Services Discovered: Oct 10, 2022 · Attack est.: Oct 10, 2022
Avalon luxury transport company - Leaked
Transportation/Logistics Discovered: Oct 5, 2022 · Attack est.: Oct 5, 2022
AudioQuest Data Leaked
Manufacturing Discovered: Oct 3, 2022 · Attack est.: Oct 3, 2022
Malayan Flour Mills Bhd. Data Leak
Agriculture and Food Production Discovered: Oct 3, 2022 · Attack est.: Oct 3, 2022
Who is the real Bad Guys here? Or what recovery experts prefer to keep silent.
Discovered: Sep 19, 2022 · Attack est.: Sep 19, 2022
TAP Air Leak of more than 1.5 million of customers and many other.
Hospitality and Tourism Discovered: Sep 19, 2022 · Attack est.: Sep 19, 2022
TAP AIR PORTUGAL - 115k personal data leak
Transportation/Logistics Discovered: Sep 12, 2022 · Attack est.: Sep 12, 2022
DDoS instead of the Discuss - Nice try TAP Air
Discovered: Sep 7, 2022 · Attack est.: Sep 7, 2022
TAP Air - First Facts
Transportation/Logistics Discovered: Sep 2, 2022 · Attack est.: Sep 2, 2022
USA Insurance company - Smith brothers File tree and some proofs
Financial Services Discovered: Aug 31, 2022 · Attack est.: Aug 31, 2022
Huge drama for Tap Air Portugal
Transportation/Logistics Discovered: Aug 31, 2022 · Attack est.: Aug 31, 2022
Announcement. Action Lab File-tree
Discovered: Aug 23, 2022 · Attack est.: Aug 23, 2022
DESFA - Pipeline company LEAK
Energy Discovered: Aug 23, 2022 · Attack est.: Aug 23, 2022
Greece pipeline company breached - DESFA
Energy Discovered: Aug 19, 2022 · Attack est.: Aug 19, 2022
File-tree of Tang Capital
Financial Services Discovered: Aug 18, 2022 · Attack est.: Aug 18, 2022
Puma Biotechnology - decided to allow Leaks
Technology Discovered: Aug 2, 2022 · Attack est.: Aug 2, 2022
GENSCO Inc. - allows Leak
Manufacturing Discovered: Jul 19, 2022 · Attack est.: Jul 19, 2022
Epec.PL - Lied about the absence of Leak
Discovered: Jul 13, 2022 · Attack est.: Jul 13, 2022
New Leak: Prudential LTG.
Financial Services Discovered: Jun 24, 2022 · Attack est.: Jun 24, 2022
New Leak: Northern Data Systems
Technology Discovered: Jun 23, 2022 · Attack est.: Jun 23, 2022
Sierra Packaging Leaked
Manufacturing Discovered: Jun 3, 2022 · Attack est.: Jun 3, 2022
Jonathan Adler Leaks
Consumer Services Discovered: Jun 1, 2022 · Attack est.: Jun 1, 2022
Germany Corporation "VMT-GmbH" Leaked
Manufacturing Discovered: May 23, 2022 · Attack est.: May 23, 2022
Simonson-Lumber decided to be Leaked
Manufacturing Discovered: May 11, 2022 · Attack est.: May 11, 2022
Simonson-Lumber Inc. First batch of Data.
Agriculture and Food Production Discovered: Apr 20, 2022 · Attack est.: Apr 20, 2022
International Centre Leaked
Education Discovered: Apr 6, 2022 · Attack est.: Apr 6, 2022
Smith Transport Full Leak
Transportation/Logistics Discovered: Mar 14, 2022 · Attack est.: Mar 14, 2022
GHI Hornos Industriales Fully Leaked
Manufacturing Discovered: Mar 4, 2022 · Attack est.: Mar 4, 2022
GHI Hornos Industriales first batch of Data (0,1%)
Manufacturing Discovered: Feb 28, 2022 · Attack est.: Feb 28, 2022
Airspan Networks got Leaked
Telecommunication Discovered: Jan 25, 2022 · Attack est.: Jan 25, 2022
IT-companies Subex & Sectrio Leaked
Technology Discovered: Jan 8, 2022 · Attack est.: Jan 8, 2022
Company Group LDLC
FR Technology Discovered: Dec 14, 2021 · Attack est.: Dec 14, 2021
Leak of IT company Saksoft
Technology Discovered: Dec 10, 2021 · Attack est.: Dec 10, 2021
Full Data Leak Linical
Healthcare Discovered: Dec 9, 2021 · Attack est.: Dec 9, 2021
Update: Linicals Data
Healthcare Discovered: Dec 4, 2021 · Attack est.: Dec 4, 2021
Groupe LDLC is going to be Leaked
FR Technology Discovered: Dec 2, 2021 · Attack est.: Dec 2, 2021
Team Computers Ltd. - Leak
Technology Discovered: Nov 23, 2021 · Attack est.: Nov 23, 2021
LINICAL doesn't care about digital hygiene
Healthcare Discovered: Oct 30, 2021 · Attack est.: Oct 30, 2021
Atlas Financial Holdings, Inc. - Leaked
Financial Services Discovered: Oct 6, 2021 · Attack est.: Oct 6, 2021
FULL DATA LEAK of Primary Residential Mortgage, Inc. //
Financial Services Discovered: Sep 14, 2021 · Attack est.: Sep 14, 2021
Primary Residential Mortgage inc. - Leaked
Financial Services Discovered: Sep 11, 2021 · Attack est.: Sep 11, 2021
Who is the real Bad Guys here? Or what recovery experts prefer to keep silent.
Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Announcement: FTP
Discovered: Jun 30, 2021 · Attack est.: Jun 30, 2021
GATEWAY Property Management
Business Services Discovered: Jun 22, 2021 · Attack est.: Jun 22, 2021
Software company Xoriant
Technology Discovered: Jun 5, 2021 · Attack est.: Jun 5, 2021
New Leak GatewayPM
Business Services Discovered: Jun 4, 2021 · Attack est.: Jun 4, 2021
NEW Links for ADATA
Technology Discovered: May 25, 2021 · Attack est.: May 25, 2021
ADATA LEAKED
Technology Discovered: May 24, 2021 · Attack est.: May 24, 2021
ADATA
Manufacturing Discovered: Apr 30, 2021 · Attack est.: Apr 30, 2021
Webhelp's company - XtraSource
Business Services Discovered: Feb 7, 2021 · Attack est.: Feb 7, 2021
Ludwig Pfeiffer Leaked
Discovered: Jan 25, 2021 · Attack est.: Jan 25, 2021
Grupo SADA Leak
Consumer Services Discovered: Dec 23, 2020 · Attack est.: Dec 23, 2020
New Data Leak post from Chemical company
Manufacturing Discovered: Dec 22, 2020 · Attack est.: Dec 22, 2020
Kaye/Bassman International - New "Wall of Shamer"
Business Services Discovered: Dec 17, 2020 · Attack est.: Dec 17, 2020
Cornerstone-BB Group Leaked
Discovered: Dec 13, 2020 · Attack est.: Dec 13, 2020
Attention, Dassault Falcon Jet updated
Manufacturing Discovered: Dec 12, 2020 · Attack est.: Dec 12, 2020
Advertising Material: Forest Construction Leaked
Construction Discovered: Dec 11, 2020 · Attack est.: Dec 11, 2020
New "WallofShamer" - East Coast Seafood Inc.
Agriculture and Food Production Discovered: Dec 9, 2020 · Attack est.: Dec 9, 2020
Updates with files in EastCoastSeafood Inc.
Agriculture and Food Production Discovered: Dec 9, 2020 · Attack est.: Dec 9, 2020
LEAK Post Campari Group
Consumer Services Discovered: Dec 9, 2020 · Attack est.: Dec 9, 2020
Shasun Chemicals & Drugs Ltd. LEAK
Manufacturing Discovered: Dec 5, 2020 · Attack est.: Dec 5, 2020
JMA Energy LEAK
Energy Discovered: Dec 4, 2020 · Attack est.: Dec 4, 2020
New Files For Leak Campari Post
Discovered: Nov 29, 2020 · Attack est.: Nov 29, 2020
Ragnar_Team Announce of Potential "WallofShamer"
Discovered: Nov 9, 2020 · Attack est.: Nov 9, 2020
LEAK post FINSA
Discovered: Nov 7, 2020 · Attack est.: Nov 7, 2020
LEAK Post CAPCOM
Discovered: Nov 7, 2020 · Attack est.: Nov 7, 2020
Official appeal to DASSAULT FALCON JET
Manufacturing Discovered: Oct 31, 2020 · Attack est.: Oct 31, 2020
Campari Group
IT Agriculture and Food Production Discovered: Oct 31, 2020 · Attack est.: Oct 31, 2020
DASSAULT FALCON JET
Manufacturing Discovered: Oct 29, 2020 · Attack est.: Oct 29, 2020
Security breach of CAPCOM network
Technology Discovered: Oct 19, 2020 · Attack est.: Oct 19, 2020
Security breach of Campari Group network
Consumer Services Discovered: Oct 7, 2020 · Attack est.: Oct 7, 2020
CMA CGM (french carrier, container line)
FR Transportation/Logistics Discovered: Sep 27, 2020 · Attack est.: Sep 27, 2020
BIOLOGICAL E. Ltd. (BE) LEAK POST
Agriculture and Food Production Discovered: Sep 26, 2020 · Attack est.: Sep 26, 2020
Insignia Environmental company.
Energy Discovered: Jul 12, 2020 · Attack est.: Jul 12, 2020
Astro Industries, Inc.
US Manufacturing Discovered: Jun 21, 2020 · Attack est.: Jun 21, 2020
New leaks from SOLTEK PACIFIC
Manufacturing Discovered: Jun 21, 2020 · Attack est.: Jun 21, 2020
Bailey&Galyen Attorney at Law
Business Services Discovered: Jun 21, 2020 · Attack est.: Jun 21, 2020
GST Autoleather Company !
Manufacturing Discovered: Jun 21, 2020 · Attack est.: Jun 21, 2020
ST Engineering
Manufacturing Discovered: Jun 21, 2020 · Attack est.: Jun 21, 2020
Leaks from company Omniga GmbH & Co.
Manufacturing Discovered: Jun 18, 2020 · Attack est.: Jun 18, 2020
Leaks from company EDP Group
Energy Discovered: Jun 18, 2020 · Attack est.: Jun 18, 2020
Leakage from company Catania, Mahon & Rider, PLLC
Business Services Discovered: Jun 10, 2020 · Attack est.: Jun 10, 2020
Brunner Announce – Hello World !
Manufacturing Discovered: Jun 10, 2020 · Attack est.: Jun 10, 2020
Leaks Company Birch Communications inc.
Discovered: Jun 9, 2020 · Attack est.: Jun 9, 2020
Energias de Portugal (EDP)
PT Energy Discovered: Mar 31, 2020 · Attack est.: Mar 31, 2020