ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
d4rk4rmy
2 incidentes
1 paises
2 sectores
threat-actor IN Ultimo: 2026-06-29
d4rk4rmy, also known as DARKARMY, is a ransomware and data extortion group that first emerged in July 2025 and operates as a Ransomware-as-a-Service (RaaS) provider. The group distinguishes itself by primarily focusing on data exfiltration and leak site extortion rather than traditional encryption-based attacks. Their operations are characterized by a politically themed narrative, promoting a "Communist Ransomware Party" ideology, and a stated policy of avoiding critical infrastructure, hospitals, and non-profit organizations. Their primary motivation is financial extortion, often achieved by leaking exfiltrated victim data on their dedicated Tor-based platform.
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| DLS / leak site | up | ransomware.anggipradana.com | Ransomware Group: d4rk4rmy |
| DLS / onion | unknown | d4rkd2fybtclo44hss2dpqpw7gmofboxhruax2az3uejw7puxxbpkvqd.onion | marktsec |
Paises afectados
United States (1)Paises objetivo (OSINT)
Australia
Brazil
Canada
United Kingdom
India
JapanMonaco
Poland
Puerto Rico
SingaporeSectores atacados
Technology (1)
Software (1)
Sectores objetivo (OSINT)
Other Information ServicesSoftware PublishersEnterprises & HoldingAccommodationManufacturingConstructionElectrical Equipment, Appliance, and Component ManufacturingPublic AdministrationAdministrative &Waste Management Educational Services