Skip to content
Leak site of apt73, captured by ThreatCluster

apt73

Active

25 tracked victims · First seen Apr 5, 2024 · Last seen Jul 24, 2026

About

Aggregated threat-intel description

A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field.<br> <br> According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit.<BR>Source: https://github.com/crocodyli/ThreatActors-TTPs

Sectors: Business Services, Technology, Financial · Countries: GB, US, BR

Recent victims

View all →
VictimSectorCountryDataViewsPostedStatus
metrabyte.cloudTechnologyDE——Jul 24, 2026listed
dgcement.comManufacturingDZ——Jul 6, 2026
azarestan.comConstructionIran——Jul 6, 2026listed
vicentetrapani.comAgribusinessArgentina——Jul 6, 2026listed
westernint.comDistributionUnited Arab Emirates——Jul 6, 2026listed
aydeniz.comNot FoundTR——Jul 3, 2026listed
flazio.comTechnologyBR——Jul 2, 2026listed
holidaypalace.comHospitality and TourismMO——Jul 2, 2026listed
ritavo.comNot FoundAT——Jul 2, 2026
kliknklik.com
kliknklik.com
Online retailer and distributor of computer equipmentIndonesiaVolume: 12,500+ emails, 2,000+ information files93,568Jun 23, 2026published
gov.br
gov.br
GovernmentBrazil—90,248Jul 1, 2026published
viennaairport.comTransportation/LogisticsAT500000+ emails, 4473 files—Jun 23, 2026published
smarty.arpinet.amTechnologyAM——Jun 3, 2026published
elections.mia.gov.am from WOLVES OF TURANPublic SectorAM——Jun 2, 2026listed
tkgm.gov.trPublic SectorTR——May 22, 2026published
minsa.com.mxNot FoundMX——May 22, 2026published
tvnmedia.comTelecommunicationPL——May 22, 2026published
grupopetersen.com.arAgriculture and Food ProductionAR——May 21, 2026published
narit.or.thPublic SectorTH——May 21, 2026published
alkaloid.com.mkPharmaceuticalsMKTotal size: 1 GB.—May 21, 2026listed
ungererandcompany.comFood and beverageDE——May 21, 2026published
tni.mil.idPublic SectorID——Feb 25, 2025
autogedal.roNot FoundRO——Feb 18, 2025
boostheat.comEnergyFR——Feb 5, 2025
mistralsolutions.comTechnologyIN——Feb 4, 2025

Found by ThreatCluster

269 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

FPJ (Paraguayan bank) Part 3
fpj.com.py part3
Oct 12, 2026
FPJ (Paraguayan bank) Part 2
fpj.com.py part2
Oct 12, 2026
FPJ (Paraguayan bank) Part 1
fpj.com.py part1
Oct 12, 2026
Sella Eng
sella.eng.br · 0.3 GB
Oct 12, 2026
FPJ Bank (Part 2)
fpj.com.py part2 · Banking
Oct 11, 2026
Sansirostadium
sansirostadium.com · Sports stadium
Oct 11, 2026
FPJ Bank (Part 3)
fpj.com.py part3 · Banking
Oct 11, 2026
siapenet.gov.br
siapenet.gov.br · Government
Oct 11, 2026
University of Punjab Government
lgpunjab.gov.in · Government
Oct 11, 2026
Gureko GURECO Sp. z o.o.
gureco.pl · Private company
Oct 11, 2026
SIAPE (Sistemas Integrados de Administração de Pessoal)
compensatii.gov.md
Oct 10, 2026
Sella Engenharia (Sella Eng.)
sella.eng.br · 0.3 GB
Oct 10, 2026
Baldinger AG
baldinger-ag.ch
Oct 10, 2026
Ministry of Internal Affairs Armenia
elections.mia.gov.am
Oct 10, 2026
Tapu ve Kadastro Genel Müdürlüğü (TKGM)
tkgm.gov.tr
Oct 10, 2026
Provident Insurance Limited (Ghana)
providentgh.com
Oct 10, 2026
Bristol-Myers Squibb
bms.com
Oct 10, 2026
Paraguayan Bank (FPJ)
fpj.com.py
Oct 10, 2026
Filmai
filmai.in
Oct 10, 2026
2M TV (Morocco)
2m.ma
Oct 10, 2026

All ransomware groups · Dark web intelligence