ScriptLeak Active
Ransomware group first observed in 2020. Uses TrickBot for deployment.0
Total Victims
2020-02-01
First Seen
2026-01-24
Last Seen
0
Known TTPs
23.3d
Avg Delay
0
Negotiations
ONION URLS
2dtk6curcmth5plnuhwxn3yw7awjf43hqbkzjxe2u4uub6slew5ig5zm.onion
TOOLS
TrickBot
Ligolo
FILE EXTENSIONS
.pay
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| No victims recorded | ||||
No TTPs data
No YARA rules
No IoCs
No ransom notes