Stormous is an Arabic-speaking, pro-Russian ransomware and hacktivist group active since at least 2022, known for politically motivated attacks across 15+ countries, collaborating with GhostSec on the GhostLocker 2.0 RaaS platform and inheriting GhostSec's RaaS operations in mid-2024. On 1st July 2026 the group has annonced the end of their operations & ervices
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
Stormous ransomware (pro-Russian)
*/
rule Stormous_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.stormous"
description = "Detects Stormous ransomware ransom note"
date = "2026-05-04"
severity = 7
score = 70
strings:
$s1 = "Stormous" ascii nocase
$s2 = "STORMOUS" ascii
$s3 = "stormous.onion" ascii nocase
condition:
any of them
}
www.higuchi-inc.co.jp/newsrelease/company/doc/unauthorized_access_incident.pdf // We have reviewed the report issued by HIGUCHI INC. To correct their mistake: the breach did not affect just one branch, but rather 3 different branches across various regions.Your data has not been leaked yet, as you are currently within an 8-day grace period. Before we publish any of your commercial or personal data, be aware that we possess 102 GB of Sage software backups, alongside numerous commercial documents.We await your reply to our messages. Follow the correct path to ensure nothing is leaked. We are waiting for you.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| BN: higuchi-inc Report Error & Warning | Business Services | — | 1 jul 2026 | |
| maglificioliliana.com UPDATE-FULL DATA DUMP FREE PART1 | Not Found | — | 28 jun 2026 | |
| lorenzoni-store.com UPDATE-FULL DATA DUMP FREE PART1 | Consumer Services | — | 28 jun 2026 | |
| montechiaro-store.com UPDATE-FULL DATA DUMP FREE PART1 | Consumer Services | — | 28 jun 2026 | |
| impulso-store.com UPDATE-FULL DATA DUMP FREE PART1 | Consumer Services | — | 28 jun 2026 | |
| higuchi-inc.co.jp | JP | Not Found | — | 28 jun 2026 |
| HIGUCHI USA, INC | US | Manufacturing | — | 28 jun 2026 |
| eogb.co.uk | GB | Energy | — | 28 jun 2026 |
| eshacloudqa.com | US | Technology | — | 28 jun 2026 |
| monoprix.tn | TN | Consumer Services | — | 28 jun 2026 |
| Official Statement: Protecting palatineschool.org Infrastructure | Education | — | 28 jun 2026 | |
| mlit.com.my UPDATE-FULL DATA DUMP NEW LINK 10GB | MY | Public Sector | — | 24 jun 2026 |
| jaggroup.com UPDATE-FULL DATA DUMP NEW LINK | Not Found | — | 24 jun 2026 | |
| maglificioliliana.com | Not Found | — | 24 jun 2026 | |
| lorenzoni-store.com | IT | Consumer Services | — | 24 jun 2026 |
| montechiaro-store.com | IT | Consumer Services | — | 24 jun 2026 |
| impulso-store.com | MX | Retail & E-Commerce | — | 24 jun 2026 |
| jaggroup.com UPDATE-FULL DATA DUMP | Not Found | — | 21 jun 2026 | |
| mlit.com.my UPDATE-FULL DATA DUMP 10GB | MY | Public Sector | — | 19 jun 2026 |
| mlit.com.my | MY | Public Sector | — | 12 jun 2026 |
| katholiekamersfoort.nl UPDATE-FOR SALE | NL | Not Found | — | 9 jun 2026 |
| sa2000.com UPDATE-FULL DATA DUMP | Not Found | — | 9 jun 2026 | |
| SA2000.COM | SA | Not Found | — | 4 jun 2026 |
| katholiekamersfoort.nl | NL | Education | — | 2 jun 2026 |
| FANASA.COM | MX | Retail & E-Commerce | — | 3 may 2026 |
| www.bkcolombia.org | CO | Other | — | 8 dic 2025 |
| www.americanadecolchones.com | CO | Retail & E-Commerce | — | 27 oct 2025 |
| rinaldi.com.br | BR | Professional Services | — | 6 jun 2025 |
| enersolcr.com | CR | Energy & Utilities | — | 2 may 2025 |
| biodimed.com | EC | Healthcare | — | 15 dic 2024 |
| uatf.edu.bo | BO | Education | — | 17 nov 2024 |
| dismogas | CO | Energy & Utilities | — | 4 mar 2024 |
| everplast | BR | Manufacturing | — | 4 mar 2024 |
| Abelsantosyasoc | AR | Other | — | 26 feb 2024 |
| Abelsantosyasoc.com.ar | AR | Healthcare | — | 2 feb 2024 |
| uffs.edu.br | BR | Education | — | 18 ene 2024 |
| Interep | BR | Transportation | — | 23 sept 2023 |
| Senior | BR | Professional Services | — | 17 jul 2023 |
| Ministerio de Cultura de la Republica de Cuba " STORMOUS + GhostSec " | CU | Government & Defense | — | 12 jul 2023 |
| Ministry of Energy and Mines (Cuba) " STORMOUS + GhostSec " | CU | Energy & Utilities | — | 12 jul 2023 |
| LINX | BR | Technology | — | 27 mar 2023 |
| DAVINCI | AR | Education | — | 25 mar 2023 |
| CESCE | BR | Financial Services | — | 25 mar 2023 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
Over +10GB GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications for garments. Furthermore, we have obtained customer databases from various parts of the world, financial records, commercial contracts, employee data, personal files for all staff members within the network, daily operational documents, and more.
Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the parent company: maglificioliliana.com/
Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the parent company: maglificioliliana.com/
Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the parent company: maglificioliliana.com/
(Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), and Accounts Payable (A/P) database backups from Sage 50 (formerly Peachtree Accounting software), indicated by the .ptb file extension Corporate data detailing domestic and international inventory tracking, trade checking, and business operations.