All Threat Groups ID: Vexy Ransomware
Active & Online 18 Victims Disclosed RSS Feed

Vexy Ransomware Syndicate Dossier

First Intercepted
2026-09-02
Latest Disclosure
2026-10-06
Victim Velocity
1.0 / claim

Threat Profile & Operational Narrative

Vexy Ransomware is a cyber extortion syndicate tracked by CTI.FYI. Our telemetry has intercepted 18 victim disclosures claimed by this actor across darknet leak portals and extortion infrastructure. Tracking covers operational periods from 2026-09-02 to 2026-10-06.

Targeted Sectors & Geographies

IT Services (3) Manufacturing (1) Industrial & Manufacturing > Electrical & Electronics (1) Information Technology Services (1) Insurance (1) Education (1) Fashion E-Commerce (1) Cybersecurity Services (1)
US (3) GB (2) AU (1) FR (1) VN (1) JP (1) IT (1) ID (1)

Known Dark Web Infrastructure & Mirrors

vexytsr3chimdz6siwaqi2lvxxwfkxvffkpwyanr2llequ2hkm56jvqd.onion
ONLINE

Disclosed Victims & Incident Archive (18)

Disclosed Victim Organization Sector Country
2026-10-06 Kookabarra Juice Manufacturing AU
2026-09-30 Summit Electric Supply Industrial & Manufacturing > Electrical & Electronics US
2026-09-29 Groupe Proxitel Information Technology Services FR
2026-09-25 Majani Insurance Brokers Insurance --
2026-09-18 Quy Nhon University Education VN
2026-09-17 STP Fashion Lab Fashion E-Commerce --
2026-09-15 Hashimoto Jimuki General JP
2026-09-12 Strad Solutions IT Services US
2026-09-10 i2k2 Networks Cybersecurity Services US
2026-09-09 Logar Network Solutions IT Services GB
2026-09-07 United Group General --
2026-09-06 Sancity General --
2026-09-05 Mega Velocity General --
2026-09-04 Sancity Soft Touch IT Services IT
2026-09-04 Annapurna Fashion Fashion & Retail GB
2026-09-04 Palsana Enviro (PEPL) Environmental Services ID
2026-09-03 McDonalds Ecuador fast food EC
2026-09-02 Engefitas General --