All Threat Groups
ID: ImNotAVillain
Imnotavillain Syndicate Dossier
First Intercepted
2026-09-26
Latest Disclosure
2026-10-02
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Imnotavillain is a cyber extortion syndicate tracked by CTI.FYI. Our telemetry has intercepted 16 victim disclosures claimed by this actor across darknet leak portals and extortion infrastructure. Tracking covers operational periods from 2026-09-26 to 2026-10-02.
Known Dark Web Infrastructure & Mirrors
o6rtgcjdjqyimjxexpejddhdfbehsjn4fcsazfkgwydeb27gqhtdntyd.onion
ONLINE
Disclosed Victims & Incident Archive (16)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2026-10-02 | Notice | Unknown | -- |
| 2026-10-02 | Warning | Unknown | -- |
| 2026-10-02 | Why it matters | Unknown | -- |
| 2026-10-02 | What is stored | Unknown | -- |
| 2026-10-02 | Jurisdiction | Unknown | -- |
| 2026-10-02 | Contact | Unknown | -- |
| 2026-09-26 | Bodin Fredrik | General | -- |
| 2026-09-26 | Kokli | General | -- |
| 2026-09-26 | Kraft | General | -- |
| 2026-09-26 | Liu | General | -- |
| 2026-09-26 | Tabacko | General | -- |
| 2026-09-26 | Mortel | General | -- |
| 2026-09-26 | Klaassen | General | -- |
| 2026-09-26 | Alontsau | General | -- |
| 2026-09-26 | Motlik | General | -- |
| 2026-09-26 | Timmermans | General | -- |