All Threat Groups ID: apt73
Active & Online 157 Victims Disclosed Eraleign RSS Feed

Apt73 Syndicate Dossier

First Intercepted
2024-04-05
Latest Disclosure
2026-10-01
Victim Velocity
1.0 / claim

Threat Profile & Operational Narrative

A new ransomware group is said to have emerged in mid-April 2024, under the name "APT73." It's worth noting that the group reportedly self-proclaimed as an APT, which stands for "Advanced Persistent Threat" in the cybersecurity field. According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit. This is evident as the group, on its Data Leak Site (DLS) website, added pages such as "Contact Us," "How to buy Bitcoin," "Web Security Bug Bounty," and "Mirrors." Another relevant fact is that this group is also known as Ransomware Eraleig. This is because the group allegedly used a domain in the past to disclose information about victims. There is no information available about any Tactics, Techniques, and Procedures associated with this ransomware group, nor about the latest artifacts used for encryption purposes.

Targeted Sectors & Geographies

Technology (26) Services (21) Manufacturing (15) Government (15) Finance (15) Retail (10) Construction (8) Healthcare (7)
US (19) GB (10) ID (6) BR (5) FR (5) MA (4) IN (4) CH (4)

Known Dark Web Infrastructure & Mirrors

eraleignews.com
OFFLINE
wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion
OFFLINE
fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion
OFFLINE
apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onion
OFFLINE
bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion
ONLINE
basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion
ONLINE
basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion
ONLINE
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
ONLINE
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
ONLINE
bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion
ONLINE
bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion
ONLINE
qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onion
OFFLINE

Disclosed Victims & Incident Archive (157)

Disclosed Victim Organization Sector Country
2026-10-01 Prices Unknown --
2026-10-01 Web Security & Bug Bounty Technology --
2026-07-27 metrabyte.cloud Technology TH
2026-07-22 dgcement.com Manufacturing PK
2026-07-20 azarestan.com Unknown IR
2026-07-17 vicentetrapani.com Manufacturing --
2026-07-15 westernint.com Unknown AE
2026-07-13 aydeniz.com Construction TR
2026-07-10 flazio.com Technology IT
2026-07-08 holidaypalace.com Services ES
2026-07-06 ritavo.com Services VN
2026-07-03 kliknklik.com Retail ID
2026-07-01 gov.br Government BR
2026-06-29 viennaairport.com (SOLD TO 3RD PARTY) Logistics AT
2026-06-06 elections.mia.gov.am from WOLVES OF TURAN Government AM
2026-06-05 tkgm.gov.tr Government TR
2026-06-03 smarty.arpinet.am Real Estate AM
2026-06-03 minsa.com.mx Manufacturing MX
2026-06-01 tvnmedia.com Services PA
2026-05-29 grupopetersen.com.ar Finance AR
2026-05-27 narit.or.th Education TH
2026-05-25 alkaloid.com.mk Healthcare MK
2026-05-22 ungererandcompany.com Manufacturing US
2026-05-15 providentgh.com Finance GH
2026-05-13 medikaplaza.com Healthcare ID
2026-05-11 jgpetrucci.com Construction US
2026-05-08 grupo-principal.com Retail MX
2026-05-06 dunav.com Finance RS
2026-05-04 cofaco.com Manufacturing PE
2026-05-01 arrawdah.org.sa Services SA
2026-04-29 alx-pc.com Energy EG
2026-04-29 ifmis.go.ke Government KE
2026-04-28 algosaibi-gtb.com Manufacturing SA
2026-04-22 olpro.com.my Manufacturing MY
2026-04-20 whessoe.com.my Construction MY
2026-04-17 phb.com Manufacturing US
2026-04-15 egov.sc Government SC
2026-04-13 asunim.co Energy --
2026-04-02 centrum.sk Technology SK
2026-03-31 2m.ma Services MA
2026-03-29 ires.ma Government MA
2026-03-28 iam.ma Services MA
2026-03-27 dpwh.gov.ph Government PH
2026-03-26 doghairinc.com Retail --
2026-03-25 isosl.be Manufacturing BE
2026-03-25 vanheyghenstaal.be Manufacturing BE
2026-03-24 moccae.gov.ae Government AE
2026-03-23 shj.ae Government AE
2026-03-20 haca.ma Government MA
2026-03-20 gedco.ps Energy PS
2026-03-20 seit.cl Technology CL
2026-03-18 novoair-bd.com Logistics BD
2026-03-18 bg.ac.rs Education --
2026-03-17 bankasia-bd.com Finance BD
2026-03-17 banak.com Retail ES
2026-02-27 amtaar.com Construction --
2026-02-19 corahperu.org Government PE
2026-02-19 mahidol.ac.th Education TH
2026-02-10 compensatii.gov.md Government MD
2026-01-28 India car owners Services IN
2026-01-28 hl.co.uk Finance GB
2026-01-28 tni.mil.id Government ID
2025-02-11 ome.tv | SOLD Technology --
2025-02-10 boostheat.com Manufacturing --
2025-02-10 mistralsolutions.com Technology US
2025-02-07 autogedal.ro General --
2025-02-07 realtaxcanada.com Services CA
2025-02-03 coel.com.mx Unknown MX
2025-01-22 fol-23.fr Services FR
2025-01-21 icicibank.com General --
2025-01-20 malindoair.com General --
2025-01-20 betclic.com Services FR
2025-01-14 pnp.co.za Retail ZA
2025-01-14 linebank.co.id Finance ID
2024-12-27 federalbank.co.in Finance IN
2024-12-24 bri.co.id (SOLD TO 3RD PARTY) Finance ID
2024-12-24 federalbank.co.in (PART1) General --
2024-12-23 n4telecom.com.br General --
2024-12-20 prixet.com Technology --
2024-12-17 minerasancristobal.com Manufacturing --
2024-12-16 leadboxhq.com Services US
2024-12-13 melhorcompraclube.com.br Services BR
2024-12-13 bms.com Healthcare US
2024-12-13 aliorbank.pl Finance PL
2024-12-13 fpj.com.py PART3 Finance PY
2024-12-09 bankily.mr General --
2024-12-09 certifiedinfosec.com Technology US
2024-12-09 siapenet.gov.br Government BR
2024-12-08 sansirostadium.com Construction --
2024-12-06 fpj.com.py PART2 Finance PY
2024-12-06 polleninformation.at Technology AT
2024-12-06 netromsoftware.ro Technology RO
2024-12-05 azpay.me General --
2024-12-03 fpj.com.py PART1 Finance PY
2024-12-03 protectasecurity.pe Finance PE
2024-12-02 sella.eng.br Construction BR
2024-11-28 gureco.pl Unknown PL
2024-11-28 lgpunjab.gov.in Government IN
2024-11-25 rao.hr Services --
2024-11-25 sfr.fr Technology FR

Showing 100 most recent disclosures of 157 total records. Use the Live Feed or API for complete records.