Onyx
Onyx is a ransomware group first observed in April 2022, based on the Chaos ransomware builder, that is notably destructive — files larger than 2MB are overwritten with random data rather than encrypted, making recovery impossible even after ransom payment — claiming approximately 13 victims across six countries.
Victims
28
First Discovered
2022-04-29
victim
Last Discovered
2022-11-21
victim
Inactive Since
3yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
28.6%
victims with domain
Countries
2
hit
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
VSOP NEWS | No | 2026-04-28T07:25:28 |
mrdxtxy6vqeqbmb4rvbvueh2kukb3e3mhu3wdothqn7242gztxyzycid.onion
|
Target
Top 5 Activity Sectors
- Retail & E-Commerce 5
- Government & Defense 5
- Healthcare 4
- Manufacturing 3
- Agriculture and Food Production 2
Top 5 Countries
-
Mexico
1
-
Brazil
1
Heatmap
YARA Rules (1)
Victims (28)
