Cipherforce
CipherForce is a newly emerged ransomware group first detected in early 2026, operating a dark web leak site and targeting technology, business services, and logistics companies across the US, China, Vietnam, India, and UAE, with at least 6 claimed victims.
Victims
6
First Discovered
2026-02-23
victim
Last Discovered
2026-02-23
victim
Inactive Since
166
days
Avg Delay
N/A
attack→claim
Infostealer
60.0%
victims with domain
Countries
5
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
CipherForce Leak Site - Victims | No | 2026-04-28T07:23:15 |
o3ydbkayttkyg4iw2nc732jxmmex25bjeyqyvuuyngnxmpehdefjr3qd.onion
|
Target
Top 5 Activity Sectors
- Technology 3
- Transportation 1
- Professional Services 1
Top 5 Countries
-
United States
2
-
United Arab Emirates
1
-
Viet Nam
1
-
India
1
-
China
1
Heatmap
YARA Rules (1)
Victims (6)
[AI generated] "Zip24 - ShipOx" is an advanced logistics company specializing in shipping and freigh…
[AI generated] "FindNear" is a location-based technology company that provides a platform for users …
[AI generated] TektTree Inc. is a global technology consulting and IT service provider that offers s…
[AI generated] "HiringSteps.com" is a robust online cloud-based platform designed to streamline the …
