Skip to content
Leak site of auditteam, captured by ThreatCluster

auditteam

Active

25 tracked victims · First seen Feb 21, 2026 · Last seen Aug 27, 2026

About

Written by ThreatCluster from 3 stories

AuditTeam is a ransomware group that claims responsibility for cyberattacks, operating within an extortion-based model evidenced by its public attack claims. The victim set includes 34 claimed victims across sectors such as Technology, Manufacturing, Consumer Services, Public Sector, and Transportation, with the most affected countries being Russia, South Korea, Colombia, Germany, and Hong Kong. Recent reporting shows a pattern of groups publicly claiming attacks across diverse sectors, illustrated by AuditTeam's September 14, 2026 claim of an attack against Ne***ox.

Sectors: Technology, Manufacturing, Other · Countries: RU, IT, KR

Recent victims

View all →
VictimSectorCountryPostedStatus
ADL Lift Services LimitedConstructionUnited KingdomOct 13, 2026published
Zena OfficeProfessional ServicesITOct 13, 2026published
Ca***kaNot FoundESOct 23, 2026listed
Admirals TradingFinancial ServicesUnited Arab EmiratesOct 2, 2026published
AD***edNot FoundGBOct 13, 2026listed
Ze***ceNot FoundITOct 13, 2026listed
Sa***geNot FoundGBOct 13, 2026listed
Ad***ngTechnologyAEOct 2, 2026listed
steelcoManufacturingITOct 1, 2026published
ProMind ITTechnologyITOct 1, 2026published
Paid Victim 32373FFB7AF7E725Not FoundITSep 29, 2026
vit.ac.in
vit.ac.in
EducationINSep 22, 2026published
Pr***ITProfessional ServicesITSep 22, 2026listed
TEK SPBTechnologyRUSep 12, 2026published
st***coNot FoundITSep 20, 2026listed
td***upNot FoundITSep 19, 2026listed
kit-e.jp
kit-e.jp
TechnologyJPSep 9, 2026published
Paid Victim 192EB2B6AD7B98D9Not FoundRUSep 18, 2026
palletshopRetail & E-CommerceRUSep 8, 2026published
Wise ITTechnologyUkraineSep 8, 2026published
bubenOtherITSep 8, 2026published
dg.ac.kr
dg.ac.kr
EducationKRSep 8, 2026published
gownet.net
gownet.net
OtherKRSep 8, 2026published
krimax.org
krimax.org
OtherARSep 8, 2026published
Ne***oxTechnologyRUSep 14, 2026listed

All ransomware groups · Dark web intelligence