Skip to content

flocker

Inactive

25 tracked victims · First seen Apr 25, 2024 · Last seen Jul 31, 2025

About

Aggregated threat-intel description

Flocker (also linked to the FSociety brand) is a ransomware-as-a-service group active since 2023–2024, targeting Windows and Linux systems via phishing, compromised RDP, and exploit kits using a double extortion model, and observed collaborating with FunkSec.

Sectors: Technology, Public Sector, Financial · Countries: US, TW, AE

Recent victims

View all →
VictimSectorCountryPostedStatus
Ieee-apscon.orgTechnologyUSJul 31, 2025
T***********p.comNot FoundJul 31, 2025
G*****n.comNot FoundJul 31, 2025
H**u.i*v.twNot FoundTWJul 31, 2025
G*********************y.orgNot FoundJul 15, 2025
Idgcayman.comNot FoundKYJul 7, 2025
S******h.comNot FoundJul 5, 2025
I*******n.comNot FoundJun 30, 2025
Ajmanre.gov.aePublic SectorAEJun 12, 2025
A*****e.gov.aePublic SectorJun 5, 2025
Lts.com.vnTechnologyVNJun 5, 2025
Dcsdev.orgNot FoundJun 1, 2025
Trustgrp.aeNot FoundAEMay 31, 2025
l*s.com.vnNot FoundMay 28, 2025
D****v.orgHealtcareMay 25, 2025
T******p.aeNot FoundAEMay 23, 2025
Z****a.comNot FoundApr 19, 2025
W*******w.comNot FoundMar 28, 2025
Salemerode.comNot FoundDEMar 9, 2025
S********e.comNot FoundMar 3, 2025
K**d.eduEducationMar 3, 2025
Eservices.gov.zmPublic SectorZMFeb 19, 2025
Gpstech2007.comTechnologyFeb 16, 2025
Mervis.infoNot FoundFeb 16, 2025
Realtime.twTechnologyTWFeb 16, 2025

All ransomware groups · Dark web intelligence