Arvinclub
Arvin Club is a threat actor with hacktivist leanings that first appeared in May 2021, primarily publishing stolen data via a TOR site and Telegram rather than deploying file-encrypting ransomware, targeting government, education, and banking sectors globally including Iranian government entities.
Victims
35
First Victim
2021-09-09
(est. attack date)
Discovery Date
2021-09-09
Last Seen
2023-10-15
Inactive Since
2yrs
more than
Avg Delay
7.4
days
Infostealer
39.1%
victims with domain
Countries
5
hit
Uptime
0.0% avg (30d)
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Arvin Club – آزادی برای اتصال | No | 2026-08-22T08:58:14 |
3kp6j22pz3zkv76yutctosa6djpj4yib2icvdqxucdaxxedumhqicpad.onion
|
||||
|
Arvin | Blog | No | 2026-08-22T08:58:02 |
arvinc7prj6ln5wpd6yydfqulsyepoc7aowngpznbn3lrap2aib6teid.onion
|
Target
Top 5 Activity Sectors
- Education 4
- Technology 4
- Agriculture and Food Production 4
- Financial Services 4
- Manufacturing 3
Top 5 Countries
-
Iran, Islamic Republic of
8
-
Colombia
3
-
United Kingdom
1
-
India
1
-
Russian Federation
1
Heatmap
YARA Rules (1)
Victims (35)
