R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/avaddon

avaddon

Inactive

Avaddon is a ransomware malware targeting Windows systems often spread via malicious spam. The first known attack where Avaddon ransomware was distributed was in February 2020. Avaddon encrypts files using the extension .avdn and uses a TOR payment site for the ransom payment.

147
Victims
1
Sites

Known Leak Sites

avaddongun7rngel.onionDLS

Victims (147)

Live
EFCO forms
avaddon
Sky Leasing, LLC
avaddon
Golden Aluminum
avaddon
J.C. Cannistraro
avaddon
Lonrho
avaddon
American Bank Systems INC
avaddon
Brown Robert LLP
avaddon
National AIDS Control Council
avaddon
Monterey Bay Air Resources District
avaddon
Dade City Florida
avaddon
KOE
avaddon
AHT Global
avaddon
Garvin Promotion Group, LLC
avaddon
NetVigour Inc
avaddon
Intensive Care On-Line Network , Inc
avaddon
Payzant Building Products Ltd
avaddon
International Longshore & Warehouse Union
avaddon
Marolles-en-Brie
avaddon
Finalyse
avaddon
BIOREP TECHNOLOGIES, INC.
avaddon
MK-Technik
avaddon
Allanasons Ltd
avaddon
American Heart of Poland Inc
avaddon
PT Asuransi Bintang Tbk
avaddon
VAUGHN CONCRETE PRODUCTS, INC
avaddon

Top Targeted Countries

Unknown143
United States3
Australia1

Profile

:

Activity

Total victims147
Countries affected3
Last seen