R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/mosesstaff

mosesstaff

Inactive

Cybereason Nocturnus describes Moses Staff as an Iranian hacker group, first spotted in October 2021. Their motivation appears to be to harm Israeli companies by leaking sensitive, stolen data.

16
Victims
2
Sites

Known Leak Sites

mosesstaffm7hptp.onionDLS
moses-staff.seDLS

Victims (16)

Live
Electron Csillag
mosesstaff
Meshulam
mosesstaff
DOSIK Technology
mosesstaff
Epsilor Company
mosesstaff
First part of Israel Post data leaked
mosesstaff
Israel MOD and Benny Gantz
mosesstaff
First part of Epsilor data leaked
mosesstaff
Ehud Leviathan Engineering
mosesstaff
David Engineers
mosesstaff
H.G.M Engineering
mosesstaff
AHEC Tax Solutions
mosesstaff
V-ON
mosesstaff
MATITIAHU BRUCHIM Law office
mosesstaff
Unit 8200
mosesstaff
3D imagery of israel
mosesstaff
This is just the beginning
mosesstaff

Top Targeted Countries

Unknown16

Activity

Total victims16
Countries affected1
Last seen