All Threat Groups
ID: underground
Underground Syndicate Dossier
First Intercepted
2023-07-14
Latest Disclosure
2025-08-15
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Underground is a cyber extortion syndicate tracked by CTI.FYI. Our telemetry has intercepted 26 victim disclosures claimed by this actor across darknet leak portals and extortion infrastructure. Tracking covers operational periods from 2023-07-14 to 2025-08-15.
Known Dark Web Infrastructure & Mirrors
undgrddapc4reaunnrdrmnagvdelqfvmgycuvilgwb5uxm25sxawaoqd.onion
OFFLINE
47glxkuxyayqrvugfumgsblrdagvrah7gttfscgzn56eyss5wg3uvmqd.onion
ONLINE
Disclosed Victims & Incident Archive (26)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2025-08-15 | SFA Engineering | General | -- |
| 2025-08-04 | shengyusteel.com | General | -- |
| 2025-06-25 | GMORS Co., Ltd | General | -- |
| 2025-04-15 | semex.com | General | -- |
| 2025-02-13 | Afa Systems Ltd. | General | -- |
| 2024-12-16 | Simmtech Co., Ltd. | General | -- |
| 2024-12-02 | awwg.com | General | -- |
| 2024-10-25 | hcsgcorp.com | General | -- |
| 2024-09-10 | Casio Computer Co., Ltd | General | -- |
| 2024-07-03 | ramservices.com | General | -- |
| 2024-06-03 | kc.co.kr | General | -- |
| 2024-05-24 | A-Line Staffing Solutions | General | -- |
| 2024-05-15 | CentralSecurities.com | General | -- |
| 2024-05-04 | Y. Hata & Co., Ltd. | General | -- |
| 2024-05-04 | belcherpharma.com | General | -- |
| 2024-05-04 | www.belcherpharma.com | General | -- |
| 2024-04-15 | cochraneglobal.com | General | -- |
| 2024-03-21 | Skender Construction | General | -- |
| 2024-03-17 | Creative Business Interiors | General | -- |
| 2024-03-14 | Y. Hata & Co., Ltd. | General | -- |
| 2024-01-26 | Triathlon.group | General | -- |
| 2024-01-07 | Ethypharm | General | -- |
| 2023-07-31 | tpa-group.sk | General | -- |
| 2023-07-18 | synology.com | General | -- |
| 2023-07-18 | frenckengroup.com | General | -- |
| 2023-07-14 | bulldogbag.com | General | -- |