Root Active
Ransomware group first observed in 2017. Uses AnyDesk for deployment.1
Total Victims
2017-02-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
7.7d
Avg Delay
0
Negotiations
ONION URLS
c6ohk5ykut2m2hqw6l25pvzoofxld234vqq7ndu43djc5nx7g4hu7o6y.onion
TOOLS
AnyDesk
ngrok
BloodHound
SharpHound
FILE EXTENSIONS
.ransom
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | Atlantic Pharma | United Kingdom | Agriculture | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes