M3rx
| Active
M3rx is a small ransomware group first observed in 2025, using AES-CTR/AES-GCM encryption and targeting organizations in England, the US, Australia, Germany, Italy, and Switzerland, with around eight claimed victims including a Sydney-based property firm.
Victims
19
First Discovered
2026-04-29
victim
Last Discovered
2026-05-17
victim
Inactive Since
2
days
Avg Delay
N/A
attack→claim
Infostealer
10.5%
victims with domain
Countries
10
hit
Attack Velocity — Last 12 months
+38% vs last month
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
M3RX Data Leak Site | Yes | 2026-05-19T11:39:05 | nginx 1.22.1 |
4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion
|
||
|
No | 2026-05-19T11:39:08 |
pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion
|
Target
Top 5 Activity Sectors
- Technology 5
- Consumer Services 5
- Business Services 3
- Transportation/Logistics 1
- Healthcare 1
Top 5 Countries
-
United States
4
-
United Kingdom
3
-
Spain
2
-
Italy
2
-
Australia
2
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (1)
tox
1
| Type | IOC |
|---|---|
tox
|
9A1217BEDA4AB77052A25D17CB6FFB34AFA2BE462E607F2FD8E1DF1DDD4CA16A64E18B1A0BF2
|
Victims (19)
+34 918 264 028. Recambios Generales del Automóvil Dosocho S.L. is a Madrid-based Spanish company sp…
+1 212-633-1515. SOFT Inc. is an established American technology consulting and professional staffin…
+39 051 890 421. Società Produttori Sementi S.p.A. (PSB) is one of Italy’s oldest and most prestigio…
+34 918 892 727. Founded in 1996, Grupo 55 Correduría de Seguros leverages decades of professional e…
+1 (512) 707-0026. Datasavior is a full-service systems integration company based in Austin, Texas, …
+61 295250878. We offer a wide selection of toys and giftware that would be suitable for birthdays, …
+45 22100211 . Alge-Stop helps homeowners and businesses keep their outdoor surfaces clean and prote…
+49 493526000000 . Freitag IT GmbH specializes in providing scalable and reliable IT solutions, incl…
+1 9417582323 . Manatee Air Heating & Cooling Inc has been providing expert HVAC services in Manatee…
Sie haben im Katalog unsere Angebote von installierten und betriebsbereiten Gerten. Die Installation…
Anvil Arts is the largest performing arts organization in Hampshire, operating as an independent cha…
Prime Properties (NSW) P/L is a privately owned company based in Sydney, Australia, established in 1…
Airdrie Physiotherapy & Massage is a multi-disciplinary clinic located in Airdrie, Alberta, offering…
Rainforest Carwash and Oil Change, along with it’s owner, enjoys giving back to our local community.…
+91 9717385459 . Optimization Software Technologies, LLP. is an advanced technology solutions develo…
+44 1476576090 . Boxtopia is the UK's leading supplier of custom cardboard boxes and printed boxes, …