Aurora
| Active
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
Victims
10
First Discovered
2026-04-29
victim
Last Discovered
2026-05-12
victim
Inactive Since
7
days
Avg Delay
11.7
days
Infostealer
10.0%
victims with domain
Countries
5
hit
Attack Velocity — Last 12 months
-89% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Aur0ra Blog | Yes | 2026-05-19T16:38:58 | nginx |
u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion
|
Target
Top 5 Activity Sectors
- Business Services 3
- Manufacturing 2
- Transportation/Logistics 1
- Healthcare 1
- Consumer Services 1
Top 5 Countries
-
United States
5
-
Canada
2
-
Philippines
1
-
United Kingdom
1
-
Maldives
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (10)
Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regio…
Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Caw…
[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company head…
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular di…
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia…
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years
The single largest data category: 75,855 passpo…
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used /…
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufa…
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquarte…
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services pr…