Ransomware - Helldown

Helldown (Active)
Decryptor Available
No
Description

This entry is under construction. However, we have included some details below.

Ransomware Type
Data Broker
First Seen
Last Seen
Threat Actors
Type
Actor
Individual
greppy
Extortion Links
Medium
Link
TOR
http://onyxcgfg4pjevvp5h34zvhaj45kbft3dg5r33j5vu3nyp7xic3vrzvad.onion
TOR
http://onyxcym4mjilrsptk5uo2dhesbwntuban55mvww2olk5ygqafhu3i3yd.onion
Extortion Types
Direct Extortion
Double Extortion
Free Data Leaks
Communication
Medium
Identifier
Email
[email protected]
Tox
19A549A57160F384CF4E36EE1A24747ED99C623C48EA545F343296FB7092795D00875C94151E
Twitter | X
@grepcn
Ransom Note Name
Readme.<9 random alphanumeric characters>.txt
Industry Sector Country Extortion Date Amount (USD)
Distribution & LogisticsUnited States
MaritimeUnited States
TransportationItaly
Retail & WholesalePoland
Professional ServicesPoland
MaritimeItaly
Engineering ServicesGermany
Retail & WholesaleAustria
Construction & ArchitectureFrance
Information TechnologySwitzerland
Security & CybersecurityUnited Kingdom
ManufacturingLebanon
ManufacturingUnited States
Real Estate & HousingGermany
Information TechnologyTaiwan
Healthcare & MedicineUnited States
References & Publications
Ransomware Tracker