ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
orca
3 incidentes
3 paises
3 sectores
ransomware RU Ultimo: 2026-06-29
Aliases: camofei, Ke3chang, Mirage, Playful Dragon, Royal APT, Vixen Panda, apt15, CAPI backdoor, cargotalon, eaglet implant, headmare, phantomc2, phantomcore, phantomocx, phantomproxylite, phantomremote, ung0901, APT REAPER
Orca is a ransomware group that first emerged in September 2024, identified as a variant of the Zeppelin malware family. The group's primary motivation is financial, and it claims to adhere to a strict policy against targeting government institutions, hospitals, or non-profit organizations. This self-imposed restriction aims to avoid unnecessary harm while pursuing financial gains.
Aliases del actor
Actores similares
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| Web | unknown | www.breachsense.com | matco-norca.com - Conti Data Breach |
| DLS / leak site | unknown | getbootstrap.com | taylor-cad.org - Conti Data Breach |
| Repositorio | unknown | github.com | taylor-cad.org - Conti Data Breach |
| Repositorio | unknown | github.com | orcasnaturals.com - Conti Data Breach |
| Repositorio | unknown | github.com | taylor-cad.org - Conti Data Breach |
| DLS / leak site | unknown | www.breachsense.com | orcasnaturals.com - Conti Data Breach |
| DLS / leak site | unknown | www.breachsense.com | taylor-cad.org - Conti Data Breach |
| DLS / leak site | unknown | ransomware.anggipradana.com | Ransomware Group: orca |
| DLS / leak site | unknown | nitter.net | Ido Cohen: Supply Chain Extortion Alert The Icarus ransomware group has escalated pressure tactics against a major Canadian consulting and competitive intelligence provider. After initially naming the organization, the group is now threatening to release data belonging to the company's clients, giving them a deadline to make contact before publication begins. |
| X/Twitter | unknown | x.com | Ido Cohen: Supply Chain Extortion Alert The Icarus ransomware group has escalated pressure tactics against a major Canadian consulting and competitive intelligence provider. After initially naming the organization, the group is now threatening to release data belonging to the company's clients, giving them a deadline to make contact before publication begins. |
Paises afectados
United States (1)Paises objetivo (SOCRadar)
Austria
China
Colombia
Spain
France
Italy
TunisiaTaiwan, Province of ChinaSectores atacados
Software (1)
Agriculture and Food Production (1)
Government (1)
Sectores objetivo (SOCRadar)
Food ManufacturingOther Information ServicesSoftware PublishersTransportation Equipment ManufacturingEnterprises & HoldingManufacturingConstructionElectrical Equipment, Appliance, and Component ManufacturingPlastics Product ManufacturingAircraft Manufacturing