R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/apt73

apt73

Inactive

A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field.<br> <br> According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit.<BR>Source: https://github.com/crocodyli/ThreatActors-TTPs

78
Victims
11
Sites

Known Leak Sites

eraleignews.comDLS
wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onionDLS
fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onionDLS
apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onionDLS
bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onionFiles
basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onionDLS
basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onionDLS
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onionDLS
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onionDLS
bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onionDLS
bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onionDLS

Victims (78)

Live
tni.mil.id
apt73ID
autogedal.ro
apt73RO
boostheat.com
apt73FR
mistralsolutions.com
apt73IN
India car owners
apt73IN
coel.com.mx
apt73MX
realtaxcanada.com
apt73CA
ome.tv
apt73TR
icicibank.com
apt73IN
malindoair.com
apt73MY
fol-23.fr
apt73FR
pnp.co.za
apt73ZA
federalbank.co.in (PART1)
apt73IN
n4telecom.com.br
apt73BR
linebank.co.id
apt73ID
federalbank.co.in
apt73IN
bri.co.id
apt73ID
www.prixet.com
apt73ES
www.minerasancristobal.com
apt73BO
leadboxhq.com
apt73US
melhorcompraclube.com.br
apt73BR
www.bms.com
apt73US
bankily.mr
apt73MR
azpay.me
apt73AZ
www.aliorbank.pl
apt73PL

Top Targeted Countries

United Kingdom14
United States12
India7
France5
Brazil5

Activity

Total victims78
Countries affected27
Last seen