All Threat Groups
ID: apt73
Apt73 Syndicate Dossier
First Intercepted
2024-04-05
Latest Disclosure
2026-10-01
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
A new ransomware group is said to have emerged in mid-April 2024, under the name "APT73." It's worth noting that the group reportedly self-proclaimed as an APT, which stands for "Advanced Persistent Threat" in the cybersecurity field.
According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit. This is evident as the group, on its Data Leak Site (DLS) website, added pages such as "Contact Us," "How to buy Bitcoin," "Web Security Bug Bounty," and "Mirrors."
Another relevant fact is that this group is also known as Ransomware Eraleig. This is because the group allegedly used a domain in the past to disclose information about victims. There is no information available about any Tactics, Techniques, and Procedures associated with this ransomware group, nor about the latest artifacts used for encryption purposes.
Targeted Sectors & Geographies
Technology (26) Services (21) Manufacturing (15) Government (15) Finance (15) Retail (10) Construction (8) Healthcare (7)
US (19) GB (10) ID (6) BR (5) FR (5) MA (4) IN (4) CH (4)
Known Dark Web Infrastructure & Mirrors
eraleignews.com
OFFLINE
wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion
OFFLINE
fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion
OFFLINE
apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onion
OFFLINE
bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion
ONLINE
basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion
ONLINE
basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion
ONLINE
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
ONLINE
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
ONLINE
bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion
ONLINE
bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion
ONLINE
qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onion
OFFLINE
Disclosed Victims & Incident Archive (157)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2026-10-01 | Prices | Unknown | -- |
| 2026-10-01 | Web Security & Bug Bounty | Technology | -- |
| 2026-07-27 | metrabyte.cloud | Technology | TH |
| 2026-07-22 | dgcement.com | Manufacturing | PK |
| 2026-07-20 | azarestan.com | Unknown | IR |
| 2026-07-17 | vicentetrapani.com | Manufacturing | -- |
| 2026-07-15 | westernint.com | Unknown | AE |
| 2026-07-13 | aydeniz.com | Construction | TR |
| 2026-07-10 | flazio.com | Technology | IT |
| 2026-07-08 | holidaypalace.com | Services | ES |
| 2026-07-06 | ritavo.com | Services | VN |
| 2026-07-03 | kliknklik.com | Retail | ID |
| 2026-07-01 | gov.br | Government | BR |
| 2026-06-29 | viennaairport.com (SOLD TO 3RD PARTY) | Logistics | AT |
| 2026-06-06 | elections.mia.gov.am from WOLVES OF TURAN | Government | AM |
| 2026-06-05 | tkgm.gov.tr | Government | TR |
| 2026-06-03 | smarty.arpinet.am | Real Estate | AM |
| 2026-06-03 | minsa.com.mx | Manufacturing | MX |
| 2026-06-01 | tvnmedia.com | Services | PA |
| 2026-05-29 | grupopetersen.com.ar | Finance | AR |
| 2026-05-27 | narit.or.th | Education | TH |
| 2026-05-25 | alkaloid.com.mk | Healthcare | MK |
| 2026-05-22 | ungererandcompany.com | Manufacturing | US |
| 2026-05-15 | providentgh.com | Finance | GH |
| 2026-05-13 | medikaplaza.com | Healthcare | ID |
| 2026-05-11 | jgpetrucci.com | Construction | US |
| 2026-05-08 | grupo-principal.com | Retail | MX |
| 2026-05-06 | dunav.com | Finance | RS |
| 2026-05-04 | cofaco.com | Manufacturing | PE |
| 2026-05-01 | arrawdah.org.sa | Services | SA |
| 2026-04-29 | alx-pc.com | Energy | EG |
| 2026-04-29 | ifmis.go.ke | Government | KE |
| 2026-04-28 | algosaibi-gtb.com | Manufacturing | SA |
| 2026-04-22 | olpro.com.my | Manufacturing | MY |
| 2026-04-20 | whessoe.com.my | Construction | MY |
| 2026-04-17 | phb.com | Manufacturing | US |
| 2026-04-15 | egov.sc | Government | SC |
| 2026-04-13 | asunim.co | Energy | -- |
| 2026-04-02 | centrum.sk | Technology | SK |
| 2026-03-31 | 2m.ma | Services | MA |
| 2026-03-29 | ires.ma | Government | MA |
| 2026-03-28 | iam.ma | Services | MA |
| 2026-03-27 | dpwh.gov.ph | Government | PH |
| 2026-03-26 | doghairinc.com | Retail | -- |
| 2026-03-25 | isosl.be | Manufacturing | BE |
| 2026-03-25 | vanheyghenstaal.be | Manufacturing | BE |
| 2026-03-24 | moccae.gov.ae | Government | AE |
| 2026-03-23 | shj.ae | Government | AE |
| 2026-03-20 | haca.ma | Government | MA |
| 2026-03-20 | gedco.ps | Energy | PS |
| 2026-03-20 | seit.cl | Technology | CL |
| 2026-03-18 | novoair-bd.com | Logistics | BD |
| 2026-03-18 | bg.ac.rs | Education | -- |
| 2026-03-17 | bankasia-bd.com | Finance | BD |
| 2026-03-17 | banak.com | Retail | ES |
| 2026-02-27 | amtaar.com | Construction | -- |
| 2026-02-19 | corahperu.org | Government | PE |
| 2026-02-19 | mahidol.ac.th | Education | TH |
| 2026-02-10 | compensatii.gov.md | Government | MD |
| 2026-01-28 | India car owners | Services | IN |
| 2026-01-28 | hl.co.uk | Finance | GB |
| 2026-01-28 | tni.mil.id | Government | ID |
| 2025-02-11 | ome.tv | SOLD | Technology | -- |
| 2025-02-10 | boostheat.com | Manufacturing | -- |
| 2025-02-10 | mistralsolutions.com | Technology | US |
| 2025-02-07 | autogedal.ro | General | -- |
| 2025-02-07 | realtaxcanada.com | Services | CA |
| 2025-02-03 | coel.com.mx | Unknown | MX |
| 2025-01-22 | fol-23.fr | Services | FR |
| 2025-01-21 | icicibank.com | General | -- |
| 2025-01-20 | malindoair.com | General | -- |
| 2025-01-20 | betclic.com | Services | FR |
| 2025-01-14 | pnp.co.za | Retail | ZA |
| 2025-01-14 | linebank.co.id | Finance | ID |
| 2024-12-27 | federalbank.co.in | Finance | IN |
| 2024-12-24 | bri.co.id (SOLD TO 3RD PARTY) | Finance | ID |
| 2024-12-24 | federalbank.co.in (PART1) | General | -- |
| 2024-12-23 | n4telecom.com.br | General | -- |
| 2024-12-20 | prixet.com | Technology | -- |
| 2024-12-17 | minerasancristobal.com | Manufacturing | -- |
| 2024-12-16 | leadboxhq.com | Services | US |
| 2024-12-13 | melhorcompraclube.com.br | Services | BR |
| 2024-12-13 | bms.com | Healthcare | US |
| 2024-12-13 | aliorbank.pl | Finance | PL |
| 2024-12-13 | fpj.com.py PART3 | Finance | PY |
| 2024-12-09 | bankily.mr | General | -- |
| 2024-12-09 | certifiedinfosec.com | Technology | US |
| 2024-12-09 | siapenet.gov.br | Government | BR |
| 2024-12-08 | sansirostadium.com | Construction | -- |
| 2024-12-06 | fpj.com.py PART2 | Finance | PY |
| 2024-12-06 | polleninformation.at | Technology | AT |
| 2024-12-06 | netromsoftware.ro | Technology | RO |
| 2024-12-05 | azpay.me | General | -- |
| 2024-12-03 | fpj.com.py PART1 | Finance | PY |
| 2024-12-03 | protectasecurity.pe | Finance | PE |
| 2024-12-02 | sella.eng.br | Construction | BR |
| 2024-11-28 | gureco.pl | Unknown | PL |
| 2024-11-28 | lgpunjab.gov.in | Government | IN |
| 2024-11-25 | rao.hr | Services | -- |
| 2024-11-25 | sfr.fr | Technology | FR |
Showing 100 most recent disclosures of 157 total records. Use the Live Feed or API for complete records.