R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/mallox

mallox

Inactive

This ransomware uses a combination of different crypto algorithms (ChaCha20, AES-128, Curve25519). The activity of this malware is dated to mid-June 2021. The extension of the encrypted files are set to the compromised company: .<target_company>

49
Victims
2
Sites

Known Leak Sites

wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onionDLS
wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onionDLS

Victims (49)

Live
integraservices
mallox
XENAPP-GLOBER
mallox
"Moshe Kahn Advocates"
mallox
Madata Data Collection & Internet Portals
mallox
Río Negro
mallox
Assist Informatica
malloxIT
speditionlangen.de
malloxDE
highfashion.com.hk
malloxHK
Ramdev Chemical Industries
malloxIN
Rafum Group
malloxPK
Versatile Card Technology Private Limited
mallox
DUHOCAAU
mallox
Measuresoft
mallox
Kirkholm Maskiningeniører
mallox
BOZOVICH TIMBER PRODUCTS INC
mallox
Kogetsu
mallox
Contec Systems
mallox
West Cargo
mallox
Franklins european bathrooms
mallox
Garuda Indonesia
mallox
Ashley HomeStore
mallox
JBCC Corp
mallox
COMPASS INFRASTRUCTURE GROUP
mallox
Tlantic
mallox
MICA ENVIRONNEMENT
mallox

Top Targeted Countries

Unknown41
India4
Italy1
Germany1
PK1

Activity

Total victims49
Countries affected6
Last seen