RunSomeWares

Active
RunSomeWares is an emerging ransomware group that surfaced in February 2025 with initial victims across supply-chain services, financial services, accounting, and manufacturing, with unclear deployment of an encryptor vs. pure data-theft extortion.
6 Victims
Jun 21, 2024 First Discovered
Jul 9, 2025 Last Discovered
434 Days Inactive
0% Infostealer
1/3 Sites Online
Known Locations (3)
Run Some Wares
rnsmwareartse3m4hjsumjf222pnka6gad26cqxqmbjvevhbnym5p6ad.onion
404 Not Found
oow7rehrxlzpy6vh3hezl2khstkpa6s7wx3iit74tr6xbjibupld5iad.onion
404 Not Found
nidzkoszg57upoq7wcalm2xxeh4i6uumh36axsnqnj3i7lep5uhkehyd.onion
Intelligence
1 Negotiation Chats
Victims (6)

Detailed victim list temporarily unavailable

This group has 6 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.