Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Exfilsquad

New Group | Active

This is an emerging group, so claims should be treated with caution until independently verified.
Only exfiltration

Victims
14
 
First Discovered
2026-07-26
victim
Last Discovered
2026-07-26
victim
Inactive Since
0
days
Avg Delay
N/A
attack→claim
Infostealer
92.3%
victims with domain
Countries
4
hit
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months
14 victims this month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon ExfilSquad Yes 2026-07-26T21:35:41 NGINX nginx exfil5gqmbxrg6yky5aeitkdj7kfwxxjh3wxzrtlewjqi2x67o634iyd.onion

Target
Top 5 Activity Sectors
  • Government & Defense 4
  • Technology 3
  • Education 2
  • Financial Services 2
  • Manufacturing 1
Top 5 Countries
  • US flag United States 9
  • GB flag United Kingdom 3
  • SE flag Sweden 1
  • NG flag Nigeria 1

Heatmap

Indicators of Compromise (IoCs) (2)
Email 1 tox 1
Type IOC
Email exfilsquad@onionmail.org
tox 8F4BCBC804C3DB35112D0FCC0E8E02F48BD1F041E8395658A8E9D3E3D2A98C221362B3C3C93F

Victims (14)
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: $12.7B DATA SUMMARY: 570K~ records containing: customer PII and addresses.…
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: SEK 8B DATA SUMMARY: 842K~ records containing: significant PII, property ownership/interes…
Logo
Discovered: 2026-07-26 (11h ago)
DATA SUMMARY: 3M~ records containing: significant PII, citizen service requests, addresses, municipa…
Logo
Discovered: 2026-07-26 (11h ago)
DATA SUMMARY: 6M~ records containing: significant PII, resident contact details, service requests, c…
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: $1B DATA SUMMARY: 430K~ records containing: customer and partner contact information, sign…
Logo
Discovered: 2026-07-26 (11h ago)
DATA SUMMARY: 440K~ records containing: applicant and student contact information, significant PII, …
Logo
Discovered: 2026-07-26 (11h ago)
[AI generated] District of Columbia Public Schools (DCPS) is a public school district serving Washin…
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: ₦2.3T DATA SUMMARY: 90M~ records containing: extensive PII, banking relationships, account…
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: $1.5B DATA SUMMARY: 2.4M~ records containing: significant PII, customer support cases, fli…
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: $1.5B DATA SUMMARY: 2M~ records containing: significant PII, customer support history, ord…
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing in…
Logo
Discovered: 2026-07-26 (11h ago)
Revenue: $318B DATA SUMMARY: 8M~ records containing: significant PII, employee and customer contact…
Logo
Discovered: 2026-07-26 (11h ago)
DATA SUMMARY: 135k law enforcement contact records with first/last name, email, police force area, e…
Logo
Discovered: 2026-07-26 (11h ago)
DATA SUMMARY: Help Portal (~600K records) – Parent and staff contact records containing full names, …