The Warlock ransomware and operator(s) are believed to be attributed to Storm-2603, a China-based threat actor who is also known to have deployed LockBit ransomware. There's also a crossover between victims with Black Basta. Both are RaaS and have a long list of known and unknown affiliates. Having said that, this is possibly an affiliate (likely a cybergroup) of both of those groups. The Alliance & Association would technically be Encryptor Sharing, but this is realistically more of an "Old Affiliate" that created their own ransomware encryptor and operation.
Victims (78)
atg.cz
CZ
Technology
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
tein.co.jp
JP
Technology
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
bel.quadra.ru
RU
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
ippm.org
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
sf.walltopia.com
US
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
nartis.ru
RU
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
alphasys.bo
BO
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
silanosn.local
Discovered: Nov 6, 2025 · Attack est.: Nov 6, 2025
No description provided.
mytune.me
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
miltech.local
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
fabrity.local
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
cybervector.co.uk
GB
Technology
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
metro.local
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
mnpease.ca
CA
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
bengineered.com.au
AU
Technology
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
goldenline.com
PL
Technology
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
energogroup.net
RU
Energy
Discovered: Nov 6, 2025 · Attack est.: Nov 1, 2025
No description provided.
siball.net
RU
Technology
Discovered: Sep 23, 2025 · Attack est.: Sep 23, 2025
all data
chroma.com.tw
TW
Technology
Discovered: Sep 16, 2025 · Attack est.: Sep 16, 2025
all data
ferus-smit.home
Discovered: Sep 16, 2025 · Attack est.: Sep 16, 2025
all data
jubileelife.com
PK
Financial Services
Discovered: Sep 16, 2025 · Attack est.: Sep 16, 2025
all data
kmssa.net
SA
Discovered: Sep 16, 2025 · Attack est.: Sep 16, 2025
all data
webville.net
Technology
Discovered: Sep 16, 2025 · Attack est.: Sep 16, 2025
all data
elssurveying.com
US
Discovered: Sep 16, 2025 · Attack est.: Sep 16, 2025
all data
medkar.com
TR
Healthcare
Discovered: Sep 16, 2025 · Attack est.: Sep 16, 2025
all data
okan.ru
RU
Discovered: Sep 8, 2025 · Attack est.: Sep 8, 2025
finance data
mffood.com
DK
Agriculture and Food Production
Discovered: Sep 1, 2025 · Attack est.: Sep 1, 2025
300G data
gmpc.com
Discovered: Sep 1, 2025 · Attack est.: Sep 1, 2025
No description provided.
airfastindonesia.com
ID
Transportation/Logistics
Discovered: Aug 25, 2025 · Attack est.: Aug 25, 2025
all user data
tagorg.com
JO
Business Services
Discovered: Aug 17, 2025 · Attack est.: Aug 17, 2025
all data
hitachi-hta.com
JP
Technology
Discovered: Aug 17, 2025 · Attack est.: Aug 17, 2025
all data
primrose.com
GB
Education
Discovered: Aug 17, 2025 · Attack est.: Aug 17, 2025
all data
clearybuilding.us
US
Construction
Discovered: Aug 17, 2025 · Attack est.: Aug 17, 2025
all data
wfd2027uae.ae
AE
Discovered: Aug 17, 2025 · Attack est.: Aug 15, 2025
all data
magcpa.com
US
Financial Services
Discovered: Aug 17, 2025 · Attack est.: Aug 14, 2025
all data
colt.net
GB
Telecommunication
Discovered: Aug 17, 2025 · Attack est.: Mar 19, 2026
1 million documents,The full set of files needs to be purchased separately.
brightwork.com
US
Technology
Discovered: Aug 17, 2025 · Attack est.: Aug 9, 2025
[AI generated] BrightWork.com is a project management software company that provides solutions for teams and organizations to manage and track their projects. It offers templates, reports, role-based dashboards, risk management...
syspro.com
US
Technology
Discovered: Aug 17, 2025 · Attack est.: Aug 9, 2025
all data
anthembio.com
US
Healthcare
Discovered: Aug 17, 2025 · Attack est.: Aug 9, 2025
all data
atcmanufacturing
Manufacturing
Discovered: Aug 17, 2025 · Attack est.: Aug 9, 2025
all data
advion.com
US
Technology
Discovered: Aug 17, 2025 · Attack est.: Aug 9, 2025
all data
accsnet.com
JP
Technology
Discovered: Aug 17, 2025 · Attack est.: Aug 9, 2025
all data
rougine-mfg.com
US
Manufacturing
Discovered: Aug 17, 2025 · Attack est.: Aug 8, 2025
all data
webcids.com
US
Technology
Discovered: Aug 17, 2025 · Attack est.: Aug 8, 2025
all data
wytechnology.local
Discovered: Aug 17, 2025 · Attack est.: Aug 7, 2025
The data has been purchased by other buyers
sipecom.com
EC
Technology
Discovered: Aug 17, 2025 · Attack est.: Aug 6, 2025
all data
starsalliance.com
Discovered: Aug 17, 2025 · Attack est.: Aug 6, 2025
The data has been purchased by other buyers
infoniqa.com
AT
Technology
Discovered: Aug 18, 2025 · Attack est.: Mar 19, 2026
165g data, including internal documents, financial documents, employee information, CRM database, HR database, SaaS database
mysecop.com
Technology
Discovered: Aug 17, 2025 · Attack est.: Jul 29, 2025
all data
orange.com
FR
Telecommunication
Discovered: Aug 17, 2025 · Attack est.: Mar 19, 2026
This is only a part of the files and file list. The full set of files needs to be purchased separately.
getdomain
DK
Discovered: Aug 17, 2025 · Attack est.: Jul 4, 2025
The data has been bought by other buyers (not victims)
houxt
GB
Discovered: Aug 17, 2025 · Attack est.: Jul 4, 2025
The data has been bought by other buyers (not victims)
houra
FR
Discovered: Aug 17, 2025 · Attack est.: Jul 4, 2025
The data has been bought by other buyers (not victims)
argeninta
Discovered: Aug 17, 2025 · Attack est.: Jul 4, 2025
The data has been bought by other buyers (not victims)
STRGOME
Discovered: Aug 17, 2025 · Attack est.: Jul 4, 2025
The data has been bought by other buyers (not victims)
woodboure
Discovered: Aug 17, 2025 · Attack est.: Jul 4, 2025
The data has been bought by other buyers (not victims)
gmtaconline
PH
Discovered: Aug 17, 2025 · Attack est.: Jul 4, 2025
The data has been bought by other buyers (not victims)
nszi
Discovered: Aug 17, 2025 · Attack est.: Jun 25, 2025
The customer has not paid, and there are no other buyers within the validity period, please enjoy your data
kipl
IN
Discovered: Aug 17, 2025 · Attack est.: Jun 25, 2025
The customer has not paid, and there are no other buyers within the validity period, please enjoy your data
lactanet
CA
Agriculture and Food Production
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] Lactanet is an agricultural company that provides critical information and innovative solutions to dairy farmers to optimize the health and productivity of their herds. Formed through a merger...
ssi-mi
JP
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] N/A
dad
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] N/A
astronika
PL
Technology
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] Astronika is a Polish company that specializes in high-tech engineering solutions, with a particular focus on space technologies. Their main activities include research, design, and development of advanced...
sras
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] N/A
icidesi
TR
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] N/A
taos
US
Technology
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] Taos is a technology services and consulting firm that specializes in cloud, DevOps, and security solutions. Headquartered in San Jose, CA, they work with clients across various industries,...
carducci
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] Carducci is an esteemed fashion brand hailing from Cape Town, South Africa. Founded in 1978, it specializes in sophisticated menswear, particularly business and casual wear, tailored suits, accessories,...
Arch-con
US
Discovered: Jun 11, 2025 · Attack est.: Jun 11, 2025
[AI generated] Arch-Con Corporation is a commercial construction company based in Houston, Texas. They work across various market sectors such as office, retail, healthcare, hospitality, industrial, and many more. Arch-Con...
via-optronics
DE
Technology
Discovered: Jun 11, 2025 · Attack est.: May 2, 2025
[AI generated] Via Optronics is a global technology company that specializes in the production of interactive display systems and digital components. The company provides solutions such as enhanced displays, touch...
currimjee
MU
Telecommunication
Discovered: Jun 11, 2025 · Attack est.: May 2, 2025
[AI generated] Currimjee Group is a Mauritian company engaged in diversified sectors since 1890. Its sectors include Telecommunications, Media & IT, Energy, Real Estate, Tourism, Food & Beverages, Financial Services,...
nipponindiaim
IN
Financial Services
Discovered: Jun 11, 2025 · Attack est.: Apr 30, 2025
[AI generated] Nippon India Mutual Fund (NIMF), previously known as Reliance Mutual Fund, is one of the leading mutual fund companies in India. It is part of Nippon Life India...
KMMP
JP
Discovered: Jun 11, 2025 · Attack est.: Apr 28, 2025
[AI generated] N/A
unilever
NL
Consumer Services
Discovered: Jun 11, 2025 · Attack est.: Apr 15, 2025
[AI generated] Unilever is a multinational corporation that sells branded consumer goods. Founded in 1929 and based in London, England and Rotterdam, Netherlands, their products range across food, beverages, cleaning...
eira-group
FI
Discovered: Jun 11, 2025 · Attack est.: Apr 10, 2025
[AI generated] N/A
iberol
ES
Discovered: Jun 11, 2025 · Attack est.: Apr 10, 2025
[AI generated] N/A
NCVOO
BM
Discovered: Jun 11, 2025 · Attack est.: Apr 4, 2025
[AI generated] N/A
Ersar
Discovered: Jun 11, 2025 · Attack est.: Apr 4, 2025
[AI generated] N/A
BTHK
HK
Discovered: Jun 11, 2025 · Attack est.: Apr 2, 2025
All data