Skip to content

crypto24

Active

25 tracked victims · First seen Dec 13, 2023 · Last seen Aug 31, 2026

About

Aggregated threat-intel description

Crypto24 is a double-extortion ransomware-as-a-service group that surfaced on the RAMP forum in mid-2024, targeting large organizations in financial services, healthcare, manufacturing, and technology across Asia, Europe, and North America, with notable victims including CMC Group, Vietnam's second-largest ICT conglomerate.

Sectors: Technology, Financial Services, Manufacturing · Countries: US, SG, ID

Recent victims

View all →
VictimSectorCountryDataPostedStatus
Me***Not FoundSG—Aug 31, 2026listed
Qatar Biomedical Research Institute (QBRI)researchQA—Apr 17, 2026published
Katcon GlobalsupplierMX—Apr 2, 2026published
Industrias Guerra, S.A.ManufacturingES700GBApr 2, 2026published
ActionPowerAIKR—Mar 27, 2026published
Estudio O'FarrellNot FoundAR—Mar 24, 2026published
Invaccs software technologies pvt ltdTechnologyIN—Mar 10, 2026
Comprehensive Orthopaedics and Musculoskeletal Care, LLCHealthcareUS—Mar 9, 2026
Rowad Modern EngineeringConstructionEG—Mar 5, 2026published
Putnam Precision, Inc.ManufacturingUS—Feb 9, 2026
MRC Prion Unit and Institute of Prion DiseasesHealthcareGB—Jan 24, 2026
Yource Bulgaria & GreeceNot FoundBG—Jan 21, 2026
Unified Assessment Platform ExamRoom.AIEducationUS—Dec 23, 2025
SASP SNCC AUTOMATISME SOLUTIONS PROCESSTechnologyFR—Dec 17, 2025
Hollysys Asia PacificTechnologySG—Dec 1, 2025
Bayu Buana Travel ServiceHospitality and TourismID—Nov 15, 2025
AsahiKASEI MICRODEVICESTechnologyUS—Nov 12, 2025
Meinhardt GroupConstructionSG—Oct 27, 2025countdown
Bayu Buana TravelHospitality and TourismID—Oct 27, 2025
U.S. Vanadium Holding Company LLCManufacturingUS—Oct 21, 2025
Banco Hipotecario del UruguayFinancial ServicesUY—Oct 3, 2025
Generali GroupFinancial ServicesIT—Sep 18, 2025
Palmgold Management Sdn BhdNot FoundMY—Aug 18, 2025
CMS Legal Services EEIGBusiness ServicesDE—Aug 16, 2025
Karndean International, LLCConsumer ServicesUS—Aug 15, 2025

All ransomware groups · Dark web intelligence