AuditTeam is a small ransomware group with approximately 5 known victims, primarily targeting organizations in East and Southeast Asia across technology and manufacturing sectors, operating a data leak site consistent with double-extortion methodology.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
==================================================================== [ AUDIT LOG: SEVERE INFRASTRUCTURE COMPROMISE VERIFIED ] ==================================================================== ATTN: Executive Management and Legal Compliance Teams This notice serves as absolute cryptographic proof that your network defenses have been fully bypassed. We have acquired extensive archives of your corporate data, internal communications, and protected records. Your failure to implement adequate security controls is now a severe liability for your board of directors and stakeholders. [ CURRENT STATUS ] Your entity is currently operating within a private Remediation Window on our DATA EXPOSURE LOGS. You have two options: OPTION A (REMEDIATION): Access our secure portal, initiate contact, and pay the Audit & Consulting fee. We will permanently purge the acquired data and provide a report on your vulnerabilities. Your reputation and compliance status remain intact. OPTION B (PUBLIC TRANSPARENCY): Ignore this notice. Once the countdown expires, we will release the entire data archive to the public internet. We will also directly notify your clients, partners, and regulatory oversight bodies of your negligence. Prepare for massive statutory fines and lawsuits. 1. Download and install the Tor Browser: [redactado] 2. Open the Tor Browser and enter the following address: [redactado] 3. Use your Audit ID to contact us: [snip] The decision belongs to your executive board. Disclosure is imminent. ====================================================================
[AI generated] N/A I don't have reliable information about a company with this specific identifier. This appears to be an anonymized or coded reference, possibly from a ransomware leak site or threat intelligence feed, rather than a verifiable company name. Without access to real-time threat intelligence databases or the original source associated with this identifier, I cannot provide factual details about its operations, industry, or country.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Ad***ng | AE | Technology | — | 2 oct 2026 |
| Paid Victim 32373FFB7AF7E725 | IT | Not Found | — | 29 sept 2026 |
| Pr***IT | IT | Professional Services | — | 22 sept 2026 |
| st***co | IT | Not Found | — | 20 sept 2026 |
| td***up | IT | Not Found | — | 19 sept 2026 |
| Paid Victim 192EB2B6AD7B98D9 | RU | Not Found | — | 18 sept 2026 |
| krimax.org | AR | Other | — | 16 sept 2026 |
| Ne***ox | RU | Technology | — | 14 sept 2026 |
| Paid Victim F9CF4B639CAC1B18 | RU | Not Found | — | 13 sept 2026 |
| Paid Victim FDC699DE3A112669 | DE | Not Found | — | 13 sept 2026 |
| vi***in | IN | Transportation | — | 13 sept 2026 |
| TE***PB | RU | Not Found | — | 12 sept 2026 |
| ki***jp | JP | Not Found | — | 10 sept 2026 |
| my***ru | RU | Technology | — | 10 sept 2026 |
| mo***al | DE | Not Found | — | 9 sept 2026 |
| dg***kr | KR | Not Found | — | 9 sept 2026 |
| go***et | KR | Technology | — | 9 sept 2026 |
| kr***rg | AR | Not Found | — | 9 sept 2026 |
| bu***en | RU | Not Found | — | 8 sept 2026 |
| Wi***IT | UA | Technology | — | 8 sept 2026 |
| pa***op | RU | Not Found | — | 8 sept 2026 |
| PIT.local | CO | Not Found | — | 4 sept 2026 |
| PI***al | CO | Financial Services | — | 27 ago 2026 |
| ma***up | RU | Not Found | — | 25 ago 2026 |
| De***up | RU | Not Found | — | 18 ago 2026 |
| I-***YS | RU | Not Found | — | 14 jun 2026 |
| Paid Victim 111CEAA5AD9DA2F1 | RU | Not Found | — | 4 jun 2026 |
| ca***lm | RU | Not Found | — | 2 jun 2026 |
| Paid Victim B35411691DDC2265 | RU | Not Found | — | 28 may 2026 |
| On***de | RU | Not Found | — | 28 may 2026 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
[AI generated] N/A I don't have any reliable information about a company named "Paid Victim 192EB2B6AD7B98D9." This appears to be an anonymized or coded identifier, possibly from a ransomware leak site or threat intelligence feed, rather than an actual company name. Without access to the specific database or source that generated this identifier, I cannot provide factual details about its operations, industry, or country.