Captured Sep 24, 2026

Dao Group

qilin

Ransomware leak-site victim intelligence

Files

2,079

Views

224

Posted

Sep 24, 2026

Industry

Software

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The leak post claims Dao Group (domain daogroup.com; software sector) was compromised and data exfiltrated. The page provides no figures or specific data categories; no quantity is stated. Publication status is listed, and the leak page includes an onion link and a WikileaksV2 reference.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Dao Group Software

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion: http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2: https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

onion leak page31 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68

Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion