Sinobi

Inactive

Sinobi is a private vetted-affiliate RaaS group that emerged in mid-2025, believed to be a rebrand of the Lynx/INC ransomware lineage, claiming 176 victims by end of 2025 through double-extortion attacks primarily against mid-market US organizations via compromised SonicWall VPN credentials.

274 Victims

Mar 23, 2025 First Discovered

May 5, 2026 Last Discovered

180 Days Inactive

0% Infostealer

0/8 Sites Online

Known Locations (8)

Sinobi

sinobi6rlec6f2bgn6rd72xo7hvds4a5ajiu2if4oub2sut7fg3gomqd.onion

Sinobi

sinobi7sukclb3ygtorysbtrodgdbnrmgbhov45rwzipubbzhiu5jvqd.onion

Sinobi

sinobi57mfegeov2naiufkidlkpze263jtbldokimfjqmk2mye6s4yqd.onion

Sinobi

sinobia6mw6ht2wcdjphessyzpy7ph2y4dyqbd74bgobgju4ybytmkqd.onion

Sinobi

sinobi7l3wet3uqn4cagjiessuomv75aw3bvgah4jpj43od7xndb7kad.onion

Sinobi

sinobi6ftrg27d6g4sjdt65malds6cfptlnjyw52rskakqjda6uvb7yd.onion

Sinobi

sinobi6ywgmmvg2gj2yygkb2hxbimaxpqkyk27wti5zjwhfcldhackid.onion

Sinobi

sinobi23i75c3znmqqxxyuzqvhxnjsar7actgvc4nqeuhgcn5yvz3zqd.onion

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (274)

Detailed victim list temporarily unavailable

This group has 274 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.