Babuk2 / Satanlock
Babuk Locker 2.0, also known as Bjorka or SkyWave, after failing to make any profit from selling public databases on forums, decided to impersonate Babuk Ransomware group. He launched a blog where he claimed multiple public breaches from BreachForums as ransomware attacks
Victims
180
First Discovered
2025-01-27
victim
Last Discovered
2025-04-23
victim
Inactive Since
1yr
more than
Avg Delay
331.4
days
Infostealer
66.7%
victims with domain
Countries
52
hit
Known Locations (4)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Babuk - Leaks site | No | 2026-04-28T07:24:45 |
7dikawx73goypgfi4zyo5fcajxwb7agemmiwqax3p54aey4dwobcvcyd.onion
|
|||
|
Babuk - Leaks site | No | 2026-04-28T07:27:19 |
bxwu33iefqfc3rxigynn3ghvq4gdw3gxgxna5m4aa3o4vscdeeqhiqad.onion
|
|||
|
No | 2026-04-28T07:22:11 |
212.24.99.211.
|
||||
|
No | 2026-04-28T07:29:09 |
5g2e.l.time4vps.cloud
|
Target
Top 5 Activity Sectors
- Government & Defense 46
- Technology 41
- Healthcare 15
- Manufacturing 13
- Professional Services 13
Top 5 Countries
-
United States
34
-
Brazil
15
-
India
10
-
Indonesia
9
-
China
7
Heatmap
Ransom Notes (1)
KQL Query (1)
-
Babuk2 (Impersonator) – Credential-Stuffing Wave Following a Leak-Site Claim
Initial Access
Sentinel
T1110.003
YARA Rules (1)
Indicators of Compromise (IoCs) (5)
Email
1
pgp
1
session
1
telegram
1
tox
1
| Type | IOC |
|---|---|
Email
|
babuklockerofficial@onionmail.org
|
pgp
|
|
session
|
051a6a26dcc1687da6c216fe69cd46cf49931c66484898e4d613eb08466f6be25d
|
telegram
|
https://t.me/y4wLPNEEagVjNDI1
|
tox
|
022A7EEB83B648F55DA7A6BEFD130C2156C74F3501A31D853234EC2D18E77A1E5BEC7F602011
|
Victims (180)
Saudi Arabian military and government internal center…
iDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers…
theeyeclinicsurgicenter.com - The Eye Clinic Surgicenter company…
nadra.gov.pk - NADRA official Of Pakistan Army & (Andhra Pradesh)…
mot.gov.iq - Iraqi Ministry of Commerce (Of Trade)…
israel Infrastructure & Secret Documents intelligence information…
Standard Capital Securities (Pvt) Backoffice - Pakistan Stock Market Data Vault…
mohrss.gov.cn ( Ministry of Human Resources and Social Security )…
Corporate access, up to Shipping Apps in QATAR…
Access Panel Financial Technology Company (Thailand)…
Municipal taxation Secretariat Access - Brazil Goverment…
Intelligence Bureau of the Joint Staff Department of the Central Military Commission China…
dukcapil.kemendagri.go.id (SIAK DUKCAPIL MINISTRY OF HOME AFFAIRS OF INDONESIA)…
Takedown notice of 18 Mars 2025 - Request #1025…
The Ministry of National Defense - mod.gov.vn (NavyVietnam)…
Intelligence Bureau of the Joint Staff Department of the Central Military Commission China…
marinabaysands.com - Singapore Hotel (Internal Server)…
Baykar Turkish defense company C4I and artificial intelligence By Babuk Locker 2.0…
Access to Indian Ministry of Defence and Military Secret (DRDO) documents By Babuk Locker 2.0…
INDONESIA TAXPAYER IDENTIFICATION NUMBER (NPWP)…
Greetings!
copral.com.br
Today we are posting here the new company, "Copral Comercio e Navegacao LT…
As America's premier elevator and escalator consulting company, BOCA Group is the partner of choice …
This is a public request for Alentec & Orion AB, you don't have much time left to get in touch with …
Lassen Sie sich kostenlos von unseren Experten aus Stuttgart beraten. Digitalisierung geht schnell u…
APMS ( Advanced Physician Management Service LLC…
a top-tier law firm in Workers Compensation Defense!…
