Skip to content
Leak site of ralord, captured by ThreatCluster

ralord

Active

19 tracked victims · First seen Mar 22, 2025 · Last seen Apr 27, 2025

About

Summarised by ThreatCluster from the group's own leak site

Tor leak site homepage for the group 'RALord' advertising a new brand 'Nova' with updated links and multiple .onion visit links, plus an upgrade prompt.

Sectors: Education, Hospitality and Tourism, Manufacturing · Countries: ES, BR, AR

Recent victims

View all →
VictimSectorCountryPostedStatus
DIALLOG companyTelecommunicationCAApr 27, 2025
HELUKABEL companyManufacturingDEApr 24, 2025
rawafid companyNot FoundSAApr 23, 2025
​​​​agromate companyNot FoundMYApr 22, 2025
​​​​bettininformatica - suporteon companyTechnologyBRApr 19, 2025
​​​​Bio-Clima ServiceBusiness ServicesITApr 16, 2025
ARRCO LSMNot FoundNOApr 15, 2025
NewHotel cloud companyHospitality and TourismESApr 15, 2025
Al-Hejailan GroupManufacturingSAApr 14, 2025
hasbco CompanyNot FoundUSApr 10, 2025
Tomio IngenieríaNot FoundARMar 31, 2025
Élan Sportif NantesNot FoundFRMar 31, 2025
Ihara companyNot FoundBRMar 31, 2025
Pere Claver grupNot FoundESMar 31, 2025
Formosa ChangHospitality and TourismTWMar 30, 2025
pereclaver.orgEducationESMar 28, 2025
ihara.com.brNot FoundBRMar 27, 2025
tomioingenieria.com.arNot FoundARMar 26, 2025
ec-nantes.frEducationFRMar 26, 2025

Found by ThreatCluster

2 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Brand
Sep 25, 2026
Nova
Sep 25, 2026

All ransomware groups · Dark web intelligence