All Threat Groups
ID: kawa4096
Kawa4096 Syndicate Dossier
First Intercepted
2025-06-19
Latest Disclosure
2025-07-28
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Kawa4096 is a cyber extortion syndicate tracked by CTI.FYI. Our telemetry has intercepted 14 victim disclosures claimed by this actor across darknet leak portals and extortion infrastructure. Tracking covers operational periods from 2025-06-19 to 2025-07-28.
Known Dark Web Infrastructure & Mirrors
kawasa2qo7345dt7ogxmx7qmn6z2hnwaoi3h5aeosupozkddqwp6lqqd.onion
OFFLINE
Disclosed Victims & Incident Archive (14)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2025-07-28 | ********.org | General | -- |
| 2025-07-27 | **********.net | General | -- |
| 2025-07-27 | **********.com | General | -- |
| 2025-07-20 | sbamh.org | General | -- |
| 2025-06-28 | carestlhealth.org | General | -- |
| 2025-06-28 | www.ogr-jp.com | General | -- |
| 2025-06-26 | **********-*******.co.jp | General | -- |
| 2025-06-26 | tokiomarine-nichido.co.jp | General | -- |
| 2025-06-25 | gatewaycsb.org | General | -- |
| 2025-06-24 | www.malonebailey.com | General | -- |
| 2025-06-22 | heimhaus.de | General | -- |
| 2025-06-22 | ******.de | General | -- |
| 2025-06-20 | Morningsideservices | General | -- |
| 2025-06-19 | icmconv.com | General | -- |