Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Obscura

Obscura is a ransomware strain observed in 2025, written in Go and specifically targeting Windows domain controllers via the SYSVOL/NETLOGON share, using Curve25519 + XChaCha20 encryption with double-extortion tactics and a 10-day payment deadline.

Victims
33
 
First Discovered
2025-09-05
victim
Last Discovered
2026-01-11
victim
Inactive Since
206
days
Avg Delay
15.8
days
Infostealer
34.4%
victims with domain
Countries
14
hit
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon Obscura Leaks Blog No 2026-04-28T07:25:26 obscurad3aphckihv7wptdxvdnl5emma6t3vikcf3c5oiiqndq6y6xad.onion

Target
Top 5 Activity Sectors
  • Professional Services 7
  • Technology 6
  • Energy & Utilities 4
  • Healthcare 4
  • Manufacturing 3
Top 5 Countries
  • US flag United States 6
  • MY flag Malaysia 5
  • DK flag Denmark 3
  • TH flag Thailand 3
  • EG flag Egypt 2

Heatmap

Ransom Notes (1)

YARA Rules (1)

Indicators of Compromise (IoCs) (3)
Hash SHA256 1 tox 2
Type IOC
Hash SHA256 c00a2d757349bfff4d7e0665446101d2ab46a1734308cb3704f93d20dc7aac23
tox 7521730C07CF45D363A627F32B3102F3F7FA72F36C2C5F9EAB0C7FBA4668527F62A90EF333E6
tox AE55FC0EB1C25A5B081650108F9081E236DECE1CE08D2E185A6F15B9FB48E700210BED374643

Victims (33)
Logo
Discovered: 2026-01-11 (6mo ago)  ·  Attack est.: 2025-12-24
Revoil trades fuels and lubricants through its network of petrol stations, which consists of more th…
Logo
Discovered: 2026-01-11 (6mo ago)  ·  Attack est.: 2025-12-15
Technology leader for modern energy infrastructure…
Logo
Discovered: 2026-01-11 (6mo ago)  ·  Attack est.: 2025-12-16
IT company specializing in enterprise solutions and hardware…
Logo
Discovered: 2026-01-11 (6mo ago)  ·  Attack est.: 2025-12-24
[Redacted]…
Logo
Discovered: 2026-01-11 (6mo ago)
STC Concrete Product Public Company Limited engages in the manufacture and distribution of precast c…
Logo
Discovered: 2026-01-11 (6mo ago)
REDtone International is a telecommunications service provider for to niche markets.…
Logo
Discovered: 2025-12-15 (7mo ago)
Technology leader for modern energy infrastructure…
Logo
Discovered: 2025-12-15 (7mo ago)
Transportation & Warehousing…
Logo
Discovered: 2025-12-12 (7mo ago)  ·  Attack est.: 2025-11-19
Ace Forwarding offers several methods of protecting your freight. Full-service crating and repackagi…
Logo
Discovered: 2025-12-12 (7mo ago)  ·  Attack est.: 2025-12-03
STARTEK is a worldwide leading company in the fingerprint identification industry, dedicated to deve…
Logo
Discovered: 2025-12-12 (7mo ago)  ·  Attack est.: 2025-12-04
StanleyCo Malaysia provides expert accounting, tax advisory, company incorporation, and compliance s…
Logo
Discovered: 2025-12-12 (7mo ago)
We present the new version of Obscura 2.0. Faster encryption mechanisms, bugs fixed in the first ver…
Logo
Discovered: 2025-11-01 (9mo ago)
Revenue: $221.7kk | Leak Size: 2 GB | Status: Pending | Time Left: 6d 17h 27m 32s…
Logo
Discovered: 2025-10-30 (9mo ago)
Revenue: $31.2kk | Leak Size: 250 GB | Status: Pending | Time Left: 8d 3h 57m 25s…
Logo
Discovered: 2025-10-29 (9mo ago)
Revenue: $41.8kk | Leak Size: 6 GB | Status: Pending | Time Left: 7d 18h 57m 21s…
Logo
Discovered: 2025-10-20 (9mo ago)
Revenue: $25.2kk | Leak Size: 80 GB | Status: Pending | Time Left: 8d 6h 57m 24s…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: $<5kk | Leak Size: xx GB | Status: Published…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: $30kk | Leak Size: xx GB | Status: Published…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: $<5kk | Leak Size: xx GB | Status: Published…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: $<5kk | Leak Size: xx GB | Status: Published…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: $<5kk | Leak Size: xx GB | Status: Published…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: $<5kk | Leak Size: xx GB | Status: Published…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: $<5kk | Leak Size: xx GB | Status: Published…
Logo
Discovered: 2025-10-13 (9mo ago)
Revenue: ?? | Leak Size: 450 GB | Status: Published…
Logo
Discovered: 2025-09-19 (10mo ago)
Design agency in Malaysia, Penang…
Logo
Discovered: 2025-09-19 (10mo ago)
Espectral specializes in providing testing and measurement equipment, focusing on sectors such as te…
Logo
Discovered: 2025-09-05 (11mo ago)  ·  Attack est.: 2025-07-16
RelationMedia A/S is the leading agency in Denmark within sales forces, merchandising, marketing, da…
Logo
Discovered: 2025-09-05 (11mo ago)  ·  Attack est.: 2025-09-01
Rulmaksan Makina is a company that operates in the Consumer Services industry.…
Logo
Discovered: 2025-09-05 (11mo ago)  ·  Attack est.: 2025-08-29
The Fixing Company is an Irish provider of premium fixing solutions specifically designed for the co…
Logo
Discovered: 2025-09-05 (11mo ago)  ·  Attack est.: 2025-08-29
Dental clinics in San Jose…
Logo
Discovered: 2025-09-05 (11mo ago)  ·  Attack est.: 2025-08-29
Dental clinics in San Jose…
Logo
Discovered: 2025-09-05 (11mo ago)  ·  Attack est.: 2025-08-29
Der WasserZweckVerband Warndt ist ein kommunaler Zweckverband, dessen Hauptaufgabe die Trinkwasserve…
Logo
Discovered: 2025-09-05 (11mo ago)  ·  Attack est.: 2025-08-27
Specializes in real estate development, contracting, and investment services. The company aims to se…