Tarantula Active
Ransomware group first observed in 2018. Uses GMER for deployment.1
Total Victims
2018-05-01
First Seen
2026-03-07
Last Seen
0
Known TTPs
25.5d
Avg Delay
0
Negotiations
ONION URLS
u6thdtnx6gi2wgdd4t4tct2vs2fewzkvzdhnjjc3yx7lqc3ymk5dg4t6.onion
TOOLS
GMER
Rclone
7-Zip
FILE EXTENSIONS
.ransom
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-07 | American Capital | Switzerland | Transportation | Removed |
No TTPs data
No YARA rules
No IoCs
No ransom notes