RunSomeWares

Inactive
RunSomeWares is an emerging ransomware group that surfaced in February 2025 with initial victims across supply-chain services, financial services, accounting, and manufacturing, with unclear deployment of an encryptor vs. pure data-theft extortion.
7 Victims
Jun 21, 2024 First Discovered
Oct 8, 2026 Last Discovered
23 Days Inactive
0% Infostealer
0/3 Sites Online
Known Locations (3)
Run Some Wares
rnsmwareartse3m4hjsumjf222pnka6gad26cqxqmbjvevhbnym5p6ad.onion
404 Not Found
oow7rehrxlzpy6vh3hezl2khstkpa6s7wx3iit74tr6xbjibupld5iad.onion
404 Not Found
nidzkoszg57upoq7wcalm2xxeh4i6uumh36axsnqnj3i7lep5uhkehyd.onion
Intelligence
1 Negotiation Chats
Victims (7)

Detailed victim list temporarily unavailable

This group has 7 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.