Discord Active
Ransomware group first observed in 2016. Uses AnyDesk for deployment.1
Total Victims
2016-02-01
First Seen
2026-03-07
Last Seen
0
Known TTPs
21.1d
Avg Delay
0
Negotiations
ONION URLS
imbd63l3bcapm25lzrhrdqbh3fjrzycap4ugiy6a4bjdj24kkznkzk7v.onion
TOOLS
AnyDesk
QBot
FILE EXTENSIONS
.pwned
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-07 | Sierra Enterprises | Germany | Aerospace & Defense | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes