ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Icarus
1 incidentes
0 paises
0 sectores
ransomware Ultimo: 2026-06-29
Icarus is a recently emerged ransomware group first observed in April 2026. The group operates with the primary motivation of financial gain, achieved by exploiting sensitive data from compromised organizations. They distinguish themselves by functioning as a data broker, employing double extortion tactics that include encrypting victim data and threatening free data leaks on their leak sites to compel payment. This group is distinct from the older Icarus Stealer malware, which is an infostealer.
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| DLS / onion | unknown | e6ujsppajgb756x7x5ykdryvlcjynltb52eiwi6pd4bfwo6hddd6neid.onion | Klue.com |
| DLS / leak site | unknown | ransomware.anggipradana.com | Ransomware Victim: HDS (Hdscorp) (Icarus) |
| DLS / leak site | unknown | nitter.net | Ido Cohen: The Icarus supply chain extortion campaign continues to unfold. The group has now added 5 additional victims, all with their identities partially concealed. The guessing game has officially begun. How many organizations were impacted through this supply chain incident? And are we witnessing the emergence of a serious competitor to CLOP in the supply chain extortion arena? We'll know more soon. |
| X/Twitter | unknown | x.com | Ido Cohen: Supply Chain Extortion Alert The Icarus ransomware group has escalated pressure tactics against a major Canadian consulting and competitive intelligence provider. After initially naming the organization, the group is now threatening to release data belonging to the company's clients, giving them a deadline to make contact before publication begins. |
| DLS / leak site | unknown | nitter.net | Ido Cohen: Supply Chain Extortion Alert The Icarus ransomware group has escalated pressure tactics against a major Canadian consulting and competitive intelligence provider. After initially naming the organization, the group is now threatening to release data belonging to the company's clients, giving them a deadline to make contact before publication begins. |
Paises objetivo (SOCRadar)
Indonesia
United StatesSectores objetivo (SOCRadar)
RetailInformation ServicesFinanceEducational ServicesPublic AdministrationData Processing ServicesE-CommerceSoftware PublishersBankingComputer Systems Design and Related Services