ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
vanirgroup
2 incidentes
1 paises
1 sectores
threat-actor UA Ultimo: 2026-06-29
Vanirgroup is a ransomware operation that emerged in mid-2024, composed of former affiliates from Karakurt, LockBit, and Knight ransomware groups. Operating under the alias Vanir Group, this Eastern European ransomware-as-a-service (RaaS) collective is primarily driven by financial gain, having explicitly stated they have no political interests. The group's distinguishing features include its formation from disgruntled affiliates of other prominent ransomware operations, its relatively short operational span before its data leak site was seized by German law enforcement in September 2024, and its unique retro-style data leak site featuring an interactive terminal.
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| DLS / leak site | seized | ransomware.anggipradana.com | Ransomware Group: vanirgroup |
| DLS / onion | offline | 6xdpj3sb5kekvq5ulym5qqmzsv6ektjgvpmajns3qrafgxtyxrhokfqd.onion | CTI.FYI |
| DLS / onion | online | 6xdpj3sb5kekvq5ulym5qqmzsv6ektjgvpmajns3qrafgxtyxrhokfqd.onion | CTI.FYI |
| DLS / onion | unknown | 6xdpj3sb5kekvq5ulym5qqmzsv6ektjgvpmajns3qrafgxtyxrhokfqd.onion | marktsec |
Paises afectados
Paises objetivo (OSINT)
China
Germany
Netherlands
Singapore
United States
VietnamSectores atacados
Law (1)
Sectores objetivo (OSINT)
ManufacturingTransportation&WarehousingInformation ServicesFinanceRental & LeasingProfessional&Technical ServicesEnterprises & HoldingOtherTextile & Fabric ManufacturingPublishing Services