Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Morpheus

| Active | RaaS

Morpheus emerged in late 2024 as a semi-private RaaS operation whose affiliates share identical payloads with the HellCat ransomware group, targeting pharmaceutical, manufacturing, legal, and Italian ESXi environments with ransom demands reaching up to 32 BTC (~$3M USD).

Victims
17
 
First Discovered
2025-01-07
victim
Last Discovered
2026-05-14
victim
Inactive Since
5
days
Avg Delay
2.2
days
Infostealer
13.3%
victims with domain
Countries
10
hit
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months
Stable vs last month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon MORPHEUS (contact morpheus.support@onionmail.org) No 2026-04-28T07:25:09 izsp6ipui4ctgxfugbgtu65kzefrucltyfpbxplmfybl5swiadpljmyd.onion

Target
Top 5 Activity Sectors
  • Business Services 4
  • Manufacturing 3
  • Agriculture and Food Production 2
  • Healthcare 2
  • Technology 2
Top 5 Countries
  • US flag United States 5
  • ES flag Spain 2
  • DK flag Denmark 1
  • TZ flag Tanzania, United Republic of 1
  • KR flag Korea, Republic of 1

Heatmap

Ransom Notes (1)

YARA Rules (1)

Indicators of Compromise (IoCs) (1)
Email 1
Type IOC
Email morpheus@onionmail.com

Victims (17)
Logo
Discovered: 2026-05-14 (5d ago)
**Website**: baytech.dk **Revenue**: $5 Million Baytech A/S is a Danish industrial engineering com…
Logo
Discovered: 2026-04-21 (28d ago)
**Website**: ggitokiomarine.com **Website**: ggipinsurance.com **Revenue**: $19.2 Million Provide…
Logo
Discovered: 2026-03-30 (1mo ago)
**Website**: sbctanzania.co.tz **Revenue**: $42.5 Million SBC Tanzania Limited, established in 200…
Logo
Discovered: 2026-02-27 (2mo ago)
**Website**: surtechinc.kr **Revenue**: $5 Million Company is a leader in the plating industry, le…
Logo
Discovered: 2026-01-29 (3mo ago)
**Website**: sunsetworldresorts.com **Revenue**: $593 Million Sunset World Group is a Mexican fami…
Logo
Discovered: 2025-12-27 (4mo ago)
**Website**: valleredondo.com.mx **Revenue**: $50 Million Family owned, founded in 1964 by Don Lui…
Logo
Discovered: 2025-12-12 (5mo ago)
**Website**: scipioni.be **Revenue**: $5 Million Scipioni is a company specializing in the distrib…
Logo
Discovered: 2025-11-20 (5mo ago)  ·  Attack est.: 2025-11-17
Website: teamglobal.com Revenue: $6.3 Million Premier contract and direct hire staffing services.…
Logo
Discovered: 2025-05-20 (0y ago)
**Website**: landmarkproperties.com **Revenue**: $1.5 Billion Landmark Properties is a fully integ…
Logo
Discovered: 2025-04-07 (1y ago)  ·  Attack est.: 2025-04-04
**Website**: metalsales.us.com **Revenue**: $270.1 Million Metal Sales is the largest manufacture…
Logo
Discovered: 2025-04-05 (1y ago)  ·  Attack est.: 2025-04-03
**Website**: latronicalaw.com **Revenue**: $5 Million The Latronica Law is a firm specializing in …
Logo
Discovered: 2025-04-01 (1y ago)
**Website**: alorapharma.com acellapharma.com avionrx.com osmotica.com sovpharm.com trigenlab.com v…
Logo
Discovered: 2025-02-25 (1y ago)  ·  Attack est.: 2025-02-24
**Website**: dinizululawgroup.com **Revenue**: $5 Million Dinizulu Law Group, Ltd is a personal in…
Logo
Discovered: 2025-02-24 (1y ago)
[AI generated] DZL is a global software company that provides library management solutions. Their pr…
Logo
Discovered: 2025-01-17 (1y ago)
**Website**: lynxspa.com **Revenue**: $292.5 Million Lynx, the Partner for Digital Transformation …
Logo
Discovered: 2025-01-07 (1y ago)
Website: https://dbghealth.com.au/arrotex/ Revenue: $92 Million The extent of the **cybersecurity …
Logo
Discovered: 2025-01-07 (1y ago)
**Website**: pus-gmbh.eu **Revenue**: $5 Million The P&S GmbH & Co. KG has specialized as a manufa…