Skip to content
Leak-site post naming CARIBE / SUBRA, captured by ThreatCluster

CARIBE / SUBRA

majinahanashi

Ransomware leak-site victim intelligence

Posted
Oct 10, 2026
Industry
Other

What was taken

Internal domain: CARIBE.LOCAL. Servers & Hyper-V encrypted. 20.000+ sensitive H&R files extracted from storage servers.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture