PhantomLocker Active
Ransomware group first observed in 2022. Uses SystemBC for deployment.1
Total Victims
2022-12-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
12.1d
Avg Delay
0
Negotiations
ONION URLS
3gfum5xixstrgo2u7yueoonjzmplqumrkxtdzududggvk4hy54fei2ac.onion
TOOLS
SystemBC
7-Zip
AnyDesk
FILE EXTENSIONS
.666
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | Elite Analytics | Brazil | Energy | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes