Ransomware : by Group

[ For GroupLink (TOR), you need to change BAWANG with ONION, example: https://tegbmnhkbpqz637f2yd.bawang >> https://tegbmnhkbpqz637f2yd.onion ]
Country Discovered Published Group Name Victim Source Description
US2026-10-212026-10-21HELIX
Google | Research
WESTROCK COFFEE
About Victim
GroupLinkShow Description
Westrock Coffee records. Yearly revenue ~$1.2 billion yearly. GoFile links and passwords unlock in 24 hours.
US2026-10-212026-10-21HELIX
Google | Research
HYPERTHERM
About Victim
GroupLinkShow Description
Hypertherm records. Yearly revenue ~$650.7 million yearly. GoFile links and passwords unlock in 24 hours.
US2026-10-192026-10-19HELIX
Google | Research
AMERICAN CAMPUS
About Victim
GroupLinkShow Description
American Campus records. Yearly revenue ~$1 billion yearly. GoFile links and passwords unlock in 6 hours.
US2026-10-182026-10-18HELIX
Google | Research
SOUTHWIRE
About Victim
GroupLinkShow Description
Southwire records. Yearly revenue ~$9 billion. GoFile links and passwords unlock in 6 hours.
US2026-10-182026-10-18HELIX
Google | Research
QUIKRETE
About Victim
GroupLinkShow Description
Quikrete records. GoFile links and passwords unlock in 6 hours.
US2026-10-172026-10-17HELIX
Google | Research
PERSONIFY HEALTH
About Victim
GroupLinkShow Description
Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.
US2026-10-172026-10-17HELIX
Google | Research
BAY ALARM
About Victim
GroupLinkShow Description
Bay Alarm records. Yearly revenue ~$256 million. GoFile links and passwords unlock in 12 hours.
US2026-10-172026-10-17HELIX
Google | Research
SMITH DOUGLAS HOMES
About Victim
GroupLinkShow Description
Smith Douglas Homes records. Yearly revenue ~$971 million. GoFile links and passwords unlock in 12 hours.
US2026-10-172026-10-17HELIX
Google | Research
RHEEM GLOBAL
About Victim
Screenshot
GroupLink
Show Description
Rheem Global customer records. Yearly revenue ~$6 billion. GoFile links and passwords unlock in 12 hours.
US2026-08-222026-08-22HELIX
Google | Research
AMSPEC
About Victim
Screenshot
GroupLink
Show Description
AmSpec is live. T1 unlocks on the current 24-hour cadence, then 24 hours per remaining tier.
US2026-08-192026-08-19HELIX
Google | Research
DELEK US
About Victim
Screenshot
GroupLink
Show Description
Delek US is live. T1 unlocks in 12 hours, then 24 hours per remaining tier.
US2026-08-162026-08-16HELIX
Google | Research
KENNEDY JENKS
About Victim
Screenshot
GroupLink
Show Description
Kennedy Jenks is live. T1 is unlocked. T2 in 24 hours, then one day each through T4.
2026-08-072026-08-07HELIX
Google | Research
VENTURE LOGISTICS
About Victim
Screenshot
GroupLink
Show Description
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.
US2026-08-072026-08-07HELIX
Google | Research
UBER
About Victim
Screenshot
GroupLink
Show Description
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.
US2026-08-072026-08-07HELIX
Google | Research
HIGHWOODS PROPERTIES
About Victim
Screenshot
GroupLink
Show Description
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.
US2026-08-072026-08-07HELIX
Google | Research
MORGUARD
About Victim
Screenshot
GroupLink
Show Description
Morguard reached out, took extensions, then ignored the negotiation with no real offer. Contacting us and stalling is not a strategy. Deadlines stand. Silence after outreach gets a private board and a countdown then publication.
CA2026-08-072026-08-07HELIX
Google | Research
WESTLAND INSURANCE
About Victim
Screenshot
GroupLink
Show Description
Westland reached out, got the full demand, then stalled with no serious number. Contacting us and dragging process is not negotiation.