VanHelsing
(Active)
Aliases
VanHelsing v1.0 Beta
Description
This entry is under construction. However, we have included some details below.
Ransomware Type
Crypto-Ransomware
Data Broker
HumOR
RaaS
First Seen
Extortion Links
Medio
Enlace
TOR
vanhelvuuo4k3xsiq626zkqvp6kobc2abry5wowxqysibmqs5yjh4uqd.onion
TOR
vanhelwmbf2bwzw7gmseg36qqm4ekc5uuhqbsew4eihzcahyq7sukzad.onion
TOR
vanhelxjo52qr2ixcmtjayqqrcodkuh36n7uq7q7xj23ggotyr3y72yd.onion
Extortion Types
Direct Extortion
Double Extortion
Free Data Leaks
Extortion Amounts
Amount
$500,000
Communication
Medio
Identificador
TOR
vanhelcbxqt4tqie6fuevfng2bsdtxgc7xslo2yo7nitaacdfrlpxnqd.onion
TOR
vanhelqmjstkvlhrjwzgjzpq422iku6wlggiz5y5r3rmfdeiaj3ljaid.onion
TOR
vanhelsokskrlaacilyfmtuqqa5haikubsjaokw47f3pt3uoivh6cgad.onion
TOR
vanheltarnbfjhuvggbncniap56dscnzz5yf6yjmxqivqmb5r2gmllad.onion
Tox
FEE914521FB507AB978107ACE3B69B4CA41DA89859408BAE23E1512E8C2E614A26C5FFD482A3
Crypto Wallets
Blockchain Type
Crypto Wallet
BTC
bc1q0cuvj9eglxk43v9mqmyjzzh6m8qsvsanedwrru
File Extension
<file name>.<file extension>.vanhelsing
<file name>.<file extension>.vanlocker
Ransom Note Name
README.txt
vhlocker.png
Samples (SHA-256)
86d812544f8e250f1b52a4372aaab87565928d364471d115d669a8cc7ec50e17
99959c5141f62d4fbb60efdc05260b6e956651963d29c36845f435815062fd98
Known Victims
| Industry Sector | País | Extortion Date | Amount (USD) |
|---|---|---|---|
| Government | United States | ||
| Manufacturing | France | ||
| Healthcare & Medicine | United States | ||
| Consulting | Italy |
References & Publications
Check Point: VanHelsing, new RaaS in Town