Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Darkpower

Dark Power emerged in January 2023 as a ransomware group written in the Nim programming language, claiming 10 victims across eight countries within its first month across agriculture, education, healthcare, IT, and manufacturing sectors, demanding $10,000 ransoms payable in Monero.

Victims
10
 
First Discovered
2023-03-11
victim
Last Discovered
2023-03-11
victim
Inactive Since
3yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
70.0%
victims with domain
Countries
5
hit
View Victims on World Map View Group Statistics

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon Dark Power Ransomware No 2026-04-28T07:23:33 powerj7kmpzkdhjg4szvcxxgktgk36ezpjxvtosylrpey7svpmrjyuyd.onion

Target
Top 5 Activity Sectors
  • Healthcare 2
  • Agriculture and Food Production 1
  • Professional Services 1
  • Government & Defense 1
  • Retail & E-Commerce 1
Top 5 Countries
  • TR flag Türkiye 2
  • DZ flag Algeria 1
  • CZ flag Czechia 1
  • PE flag Peru 1
  • FR flag France 1

Heatmap

Ransom Notes (1)

YARA Rules (1)

Victims (10)
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available
Logo
Discovered: 2023-03-11 (3y ago)
No description available