Cloak
| Active | RaaS
Cloak is a ransomware-as-a-service operation active since late 2022, primarily targeting small-to-medium enterprises in Europe — especially Germany — across manufacturing, healthcare, education, and government sectors, with expansion into North American and Asian targets by 2025.
Victims
166
First Discovered
2023-08-24
victim
Last Discovered
2026-06-18
victim
Inactive Since
50
days
Avg Delay
10.3
days
Infostealer
26.5%
victims with domain
Countries
30
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
403 Forbidden | No | 2026-04-28T07:23:11 |
cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion
|
Target
Top 5 Activity Sectors
- Professional Services 33
- Manufacturing 16
- Technology 15
- Financial Services 9
- Healthcare 8
Top 5 Countries
-
United States
42
-
Germany
38
-
United Kingdom
10
-
Canada
7
-
France
4
Heatmap
Ransom Notes (3)
KQL Query (1)
-
Cloak – High-Rate File Rename with Ransom-Note Drop (Generic Encryptor Behavior)
Encryption / Impact
Sentinel
T1486
Negotiation Chats (2)
20230802-2
66 msgs
20230802
54 msgs
YARA Rules (1)
Indicators of Compromise (IoCs) (2)
Victims (166)
[AI generated] "Dinnebiergruppe.de" is a German company incorporated into the automobile industry. T…
[AI generated] Fitzpatrick Hotels operates two boutique hotels in New York City, providing Irish-sty…
Seit über dreißig Jahren betreuen Frank Hoffmann und Stephan Hofmann zuverlässig Mandanten an Rhein …
[AI generated] "Bosshard-farben.ch" is a Swiss company specializing in the sale of floor and wall pa…
[IA generated] Swiss company specializing in the production of paints, varnishes, and glazes for bui…
[AI generated] "Wr-recht.de" is a German legal advisory firm that specializes in matters of insolven…
[AI generated] Baltimore City Public Schools, also known as City Schools, is a public school distric…
[AI generated] Waggoner Engineering, founded in 1976, is a professional services firm with a focus o…
Mai***********.de
Country: germany
Views: 1
View more /hidden_112
Private
<100GB…
bac***********.com.au
Country: Australia
Views: 2
View more /hidden_111
Private
<100GB…
Kai*************.de
Country: germany
Views: 0
View more /hidden_109
Private
<100GB…
[AI generated] Fmp.gob.pe refers to the Fondo MIVIVIENDA, a Peruvian government initiative aimed at …
Orthopaedie-hof.de
Country: Germany
Views: 51
View more /ortho
Public
<100GB…
N************.uk
Country: United Kingdom
Views: 0
View more /hidden_108
Private
125GB…
