All Threat Groups ID: Vexy Ransomware
Active & Online 24 Victims Disclosed RSS Feed

Vexy Ransomware Syndicate Dossier

First Intercepted
2026-09-02
Latest Disclosure
2026-10-31
Victim Velocity
1.0 / claim

Threat Profile & Operational Narrative

Vexy Ransomware is a cyber extortion syndicate tracked by CTI.FYI. Our telemetry has intercepted 24 victim disclosures claimed by this actor across darknet leak portals and extortion infrastructure. Tracking covers operational periods from 2026-09-02 to 2026-10-31.

Targeted Sectors & Geographies

Technology (11) Manufacturing (3) Retail & Wholesale (3) Other (1) Financial Services (1) Education (1) Construction (1) Professional Services (1)
US (5) GB (3) JP (2) CO (1) AU (1) FR (1) VN (1) IT (1)

Known Dark Web Infrastructure & Mirrors

vexytsr3chimdz6siwaqi2lvxxwfkxvffkpwyanr2llequ2hkm56jvqd.onion
ONLINE

Disclosed Victims & Incident Archive (24)

Disclosed Victim Organization Sector Country
2026-10-31 JHAMF Group Technology CO
2026-10-31 System Soft Technology --
2026-10-16 polisee Inc Technology JP
2026-10-16 Data-Core Systems Technology --
2026-10-15 Enchanted Fine Jewellery Other GB
2026-10-13 Guarufilme Manufacturing --
2026-10-06 Kookabarra Juice Manufacturing AU
2026-09-30 Summit Electric Supply Manufacturing US
2026-09-29 Groupe Proxitel Technology FR
2026-09-25 Majani Insurance Brokers Financial Services --
2026-09-18 Quy Nhon University Education VN
2026-09-17 STP Fashion Lab Retail & Wholesale --
2026-09-15 Hashimoto Jimuki General JP
2026-09-12 Strad Solutions Technology US
2026-09-10 i2k2 Networks Technology US
2026-09-09 Logar Network Solutions Technology GB
2026-09-07 United Group Technology US
2026-09-06 Sancity Construction --
2026-09-05 Mega Velocity Technology US
2026-09-04 Sancity Soft Touch Technology IT
2026-09-04 Annapurna Fashion Retail & Wholesale GB
2026-09-04 Palsana Enviro (PEPL) Professional Services ID
2026-09-03 McDonalds Ecuador Retail & Wholesale EC
2026-09-02 Engefitas General --