Rancoz

Inactive

Rancoz is a Windows-targeting ransomware strain first observed in November 2022 that appends the ".rec_rans" extension to encrypted files, considered a Vice Society copycat, deployed against a small number of organizations using double extortion and linked to the same developer as the "Buddy" ransomware.

6 Victims

May 5, 2023 First Discovered

Sep 3, 2023 Last Discovered

1154 Days Inactive

0% Infostealer

0/1 Sites Online

Known Locations (1)

Rancoz | Blog

ze677xuzard4lx4iul2yzf5ks4gqqzoulgj5u4n5n4bbbsxjbfr7eayd.onion

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (6)

Detailed victim list temporarily unavailable

This group has 6 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.