Karakurt
Karakurt is a pure data-extortion group (no encryption) assessed with high confidence to be the extortion arm of the Conti ransomware group, active from 2021, that steals data and threatens to auction or publish it unless ransoms ranging from $25,000 to $13 million are paid.
Victims
74
First Victim
2022-12-11
(est. attack date)
Discovery Date
2022-12-11
Last Seen
2023-09-22
Inactive Since
2yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
42.1%
victims with domain
Countries
4
hit
Uptime
47.0% avg (30d)
Known Locations (3)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Chat | No | 2026-08-22T08:57:20 |
omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion
|
||||
|
Magazine | No | 2026-08-22T08:57:38 |
3f7nxkjway3d223j27lyad7v5cgmyaifesycvmwq7i7cbs23lb6llryd.onion
|
||||
|
Alternative Angebote | No | 2026-09-07T10:41:02 |
karaleaks.com
|
Target
Top 5 Activity Sectors
- Healthcare 20
- Manufacturing 10
- Education 7
- Professional Services 6
- Retail & E-Commerce 5
Top 5 Countries
-
United States
5
-
Singapore
1
-
India
1
-
Viet Nam
1
Heatmap
Ransom Notes (2)
Tools Used
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
|
|
AnyDesk
|
|
Mimikatz
|
Cobalt Strike
|
Ngrok
|
|
FileZilla
MEGA
RClone
|
YARA Rules (1)
Cryptomoney (19)
Victims (74)
Hospice of Huntington, Inc. is the first hospice in the State of West Virginia. Founded in 1982. Kar…
Yakima Valley Radiology PC is a company that operates in the Hospital & Health Care industry. 10 of …
Valley Mountain Regional Center is a private company that serves children and adults with developmen…
Founded in 1978, McAlester Regional Health Center is devoted to a continuum of care offering a varie…
Regional Family Medicine is a primary care group comprised of two separate clinic locations, eight p…
Jefferson County Hospital, Waurika, Oklahoma, is a 25-bed critical access facility providing medical…
Pan Pacific Hotels Group is a wholly-owned hotel subsidiary of Singapore-listed UOL Group Limited. P…
Gibson Technical Center is a career and technical education school that is part of the Reeds Spring …
Eastside Union School District seeks to provide an inclusive, challenging and innovative education i…
Beacon ABA Services, Inc. is a private group practice of behavior analysts and behavioral therapists…
The Chattanooga Heart Institute at Memorial offers a comprehensive multidisciplinary approach to car…
York County School of Technology offers educational opportunities where every student is guided and …
Since 1953, Peachtree Orthopedics has been serving the orthopedic needs of the greater Atlanta commu…
Our Sunday Visitor is a Catholic publisher serving millions of Catholics globally through its publis…
La Red Health Center provides an outreach programs help reach undeserved populations and enhance acc…
Lifeline Vascular Access provides management services that streamline the delivery of patient care, …
Winona Powder Coating is the largest provider of finishing services in the Northern Indiana/Southern…
TransMedics, Inc., a medical device company, develops and provides portable warm blood perfusion sys…
Wynn-Reeth provides services to the client which will help the individual meet daily living needs. T…
Founded in 1930 the Ozarks Community Hospital (OCH) of Gravette, AR is located in what was previousl…
Pharm-Pacc Corporation is a provider of Managed Recovery Services to hundreds of hospitals throughou…
The Petaluma Health Center is a Federally Qualified Health Center that strives to care for the "whol…
Founded in 1961, Medicalodges is a provider of healthcare services. Medicalodges goals is to serve, …
Officeworks Inc, has shared with us some of their employees with addresses, birth certificates, driv…
OptionMetrics provides its customers with databases of various business directions. They have shared…
We're happy to present you a brilliant 4TB stolen from a microfinance institution. We have 2,861,839…
We're happy to present you a brilliant 4TB stolen from a microfinance institution. We have 2,861,839…
The National Board of Osteopathic Medical Examiners (NBOME) is an independent, nongovernmental, not-…
River City Science Academy (RCSA) is a tuition-free, public charter school located in Duval County i…
Centrisys is a USA manufacturer of decanter centrifuges for sludge dewatering and thickening. Since …
BauVal was founded in 1954 on the South Shore of Montreal and was first specialized in civil enginee…
Bevolution Group is among the nation's most diverse and creative foodservice beverage providers. It …
