All Threat Groups ID: benzona
Monitored (Active Archive) 14 Victims Disclosed RSS Feed

Benzona Syndicate Dossier

First Intercepted
2025-11-26
Latest Disclosure
2026-01-30
Victim Velocity
1.0 / claim

Threat Profile & Operational Narrative

Benzona is a cyber extortion syndicate tracked by CTI.FYI. Our telemetry has intercepted 14 victim disclosures claimed by this actor across darknet leak portals and extortion infrastructure. Tracking covers operational periods from 2025-11-26 to 2026-01-30.

Known Dark Web Infrastructure & Mirrors

benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd.onion
OFFLINE
rwsu75mtgj5oiz3alkfpnxnopcbiqed6wllyoffpuruuu6my6imjzuqd.onion
OFFLINE

Disclosed Victims & Incident Archive (14)

Disclosed Victim Organization Sector Country
2026-01-30 casamedica.com.gt General --
2026-01-22 empreinte-hotel.com General --
2026-01-22 *a*ame*i*a.com.g* General --
2026-01-17 ccbrt.org General --
2026-01-17 em***int*-ho***.com General --
2026-01-12 cc***.or.*z General --
2025-12-22 taminsho.com General --
2025-12-06 platinumone.in General --
2025-12-03 SUNNYGO.COM.TW General --
2025-11-26 suzuki-ploiesti.ro General --
2025-11-26 poliserv.ro General --
2025-11-26 mazda-ploiesti.ro General --
2025-11-26 dacia-ploiesti.ro General --
2025-11-26 sevci.org General --