R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/beast

beast

Active

Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process starting and stopping, and geographic identification to avoid encryption in CIS countries.

59
Victims
2
Sites

Known Leak Sites

beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd.onionDLS
ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad.onionFiles

Victims (59)

Live
First 4 Recruitment
beastGB
Daniel L Kaler, DDS, PC
beastUS
Law Office of COX & SANCHEZ
beastUS
Andringa Law
beastUS
Hospital Sao Jose do Avai (HSJA)
beastBR
Yulkok Ltd
beastKR
Ruskin College
beastUK
St Andrew's CE High School
beastUK
Orthopaedic Specialists of Massachusetts
beastUS
Richard Alibon Primary School
beastGB
Ideal International
beast
Collett Hulance
beastGB
Commercial Paving Ltd.
beast
Outback Pharmacies
beastAU
Goldhorse Capital Management
beastCH
Ringmor
beast
Punjab Forensic Science Agency
beastPK
Noroaco
beast
GeBePro
beastDE
Bolt Electricity, Oil & Gas
beast
Danthi Comunicacao Integrada
beastBR
Microdevice
beast
Perennial
beast
The Methodist Church of Southern Africa
beastZA
Garro Fabril
beastAR

Top Targeted Countries

United States19
Unknown18
United Kingdom3
Brazil3
UK2

Profile

:

Activity

Total victims59
Countries affected18
Last seen