Active & Online 8 Victims Disclosed run some wares RSS Feed

Runsomewares Syndicate Dossier

First Intercepted

2024-06-22

Latest Disclosure

2026-10-08

Victim Velocity

1.0 / claim

Threat Profile & Operational Narrative

Runsomewares is a cyber extortion syndicate tracked by CTI.FYI. Our telemetry has intercepted 8 victim disclosures claimed by this actor across darknet leak portals and extortion infrastructure. Tracking covers operational periods from 2024-06-22 to 2026-10-08.

Targeted Sectors & Geographies

Healthcare (1) Finance (1)

US (1)

Known Dark Web Infrastructure & Mirrors

rnsmwareartse3m4hjsumjf222pnka6gad26cqxqmbjvevhbnym5p6ad.onion

ONLINE

oow7rehrxlzpy6vh3hezl2khstkpa6s7wx3iit74tr6xbjibupld5iad.onion

OFFLINE

nidzkoszg57upoq7wcalm2xxeh4i6uumh36axsnqnj3i7lep5uhkehyd.onion

OFFLINE

Disclosed Victims & Incident Archive (8)

Disclosed	Victim Organization	Sector	Country
2026-10-08	Morton LTC Pharmacy	Healthcare	US
2026-10-07	F&V Capital Management, LLC (FVCM)	Finance	--
2025-07-10	Coös County Family Health	General	--
2025-04-10	Harvest	General	--
2025-02-27	Donna G. Rogers, CPA, P.A.	General	--
2025-02-27	Thai Metal Aluminium Co., Ltd	General	--
2025-01-01	F&V Capital Management, LLC	General	--
2024-06-22	Gilbert	General	--