R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/ransomexx

ransomexx

Active

RansomExx is a ransomware family that targeted multiple companies starting in mid-2020. It shares commonalities with Defray777.

83
Victims
1
Sites

Known Leak Sites

rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onionDLS

Victims (83)

Live
ADDA (adda.io)
ransomexxIN
Grupo Vargas
ransomexxVE
Lakeshore Title Agency
ransomexxUS
Makesworth Accountants
ransomexxGB
Retemex
ransomexxMX
Brontoo Technology Solutions
ransomexxIN
nursing.com
ransomexx
Planet Group International
ransomexxUS
LITEON
ransomexxTW
Wagner-Meinert
ransomexx
United Carton Industries Company
ransomexxSA
Ruwac Industrial Vacuums
ransomexxUS
Diagnostica Stago
ransomexxFR
Bombardier Recreational Products
ransomexxCA
Consorci Sanitari Integral
ransomexxES
Badan Urusan Logistik
ransomexxID
Jacobs Farm / Del Cabo
ransomexxUS
DVision Architecture
ransomexxIT
Telecommunications Services of Trinidad and Tobago
ransomexxTT
Ministry of Defense of Peru
ransomexxPE
Asteco
ransomexxAE
Kenya Airways
ransomexxKE
AlJaber Engineering
ransomexxQA
Admilla ELAP
ransomexx
Telecommunications Services of Trinidad and Tobago (tstt.co.tt)
ransomexx

Top Targeted Countries

Unknown48
United States9
India2
Italy2
Brazil2

Profile

:
:

Activity

Total victims83
Countries affected23
Last seen