Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Secp0 / Secpo

Encrypted Extension: .vanhelsing, .vanlocker. Targets Windows Platform only

Victims
6
 
First Discovered
2025-03-14
victim
Last Discovered
2026-04-29
victim
Inactive Since
103
days
Avg Delay
2
days
Infostealer
40.0%
victims with domain
Countries
2
hit
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months

Known Locations (4)
Favicon Title Type Available Last Visit Server Info FQDN
favicon SECP0 News Yes 2026-08-10T00:09:06 NGINX nginx 1.24.0 secponewsxgrlnirowclps2kllzaotaf5w2bsvktdnz4qhjr2jnwvvyd.onion
favicon No 2026-08-10T00:08:05 secp0-news.ws
favicon No 2026-07-09T09:23:55 secp0-leaks.com
favicon Error Response Page No 2026-06-02T03:05:17 secp0-support.cfd

Target
Top 5 Activity Sectors
  • Professional Services 3
  • Technology 2
  • Manufacturing 1
Top 5 Countries
  • US flag United States 4
  • CA flag Canada 2

Heatmap

YARA Rules (1)

Victims (6)
Logo
Discovered: 2026-04-29 (3mo ago)  ·  Attack est.: 2026-04-27
The exposed dataset includes over 200,000 unique files containing sensitive information on more than…
Logo
Discovered: 2026-04-14 (3mo ago)
The exposed dataset includes over 100,000 unique files (192,993 with duplicates) containing sensitiv…
Logo
Discovered: 2026-04-14 (3mo ago)
The exposed dataset includes over 897,000 unique files (1,707,433 with duplicates) containing sensit…
Logo
Discovered: 2026-04-14 (3mo ago)
The total volume of extracted data amounts to approximately 1.09TB (522,925 files total), with a fil…
Logo
Discovered: 2026-04-14 (3mo ago)
The total volume of extracted data amounts to approximately 489 GB (459,391 files total). The files …
Logo
Discovered: 2025-03-14 (1y ago)
Due to Terralogic's unwillingness to cooperate, we are publishing evidence of the breach of their ne…