HYFLOCK
(Active)
Aliases
Nishi
Description
This is an emerging and active group. Data will be added as it's discovered.
Ransomware Type
Crypto-Ransomware
Data Broker
RaaS
First Seen
Lineage
Alliances & Associations
Type
Alliance/Association
Operator(s) Affiliate
LockBit
Operator(s) Affiliate
Qilin
Extortion Links
Moyen
Lien
TOR
yhgphvfgaecacgtlbn67u7yfhafe6evnj4gs4s2oyb3hzjnlhq45azqd.onion
Extortion Types
Direct Extortion
Double Extortion
Free Data Leaks
Communication
Moyen
Identifiant
Admin Panel
e5hdifgit6ua7k4ggmltume7kbyryksdnlrkc55we33fnshgxfeqgsyd.onion
Duty-Free
hyflock123
Email
Session Messenger
0545dac824d6f4479f0368b06bcbe938dee01146f07f821dccec07e1f92c53ba5e
Tox
37BC1EC8D8EEE7ECEA44A953855DAC628DF0920CE41EE4164006BDC95ADEBA5738C870A23686
Encryption
Type
Hybrid
Files
AES-128-CTR
Key
RSA-4096
File Extensions
Type
File Extension
Append
.locked
Ransom Note Name
How to Restore My Files.html
How to Restore My Files.txt
What happen of my file.txt
Samples (SHA-256)
80c474154b1df816cf513ae978936875b6dd77f47ef6bce78dda83ab1b89525b
9cca754887499a22b6c07c31f9418a182eabf8e75ded7200362c5fde0abf7d34
Known Victims(8)
| Industry Sector | Pays | Extortion Date | Amount (USD) |
|---|---|---|---|
| Accounting Services | Malaysia | ||
| Engineering Services | Brazil | ||
| Engineering Services | Saudi Arabia | ||
| Chemical | India | ||
| Food & Beverage | India | ||
| Telecommunications | Bangladesh | ||
| Government | Ecuador | ||
| Healthcare & Medicine | Türkiye |
References & Publications
Flare Systems, Inc.: Ransomware-as-a-Service: LockBit Alumni Launch Competing Programs as Ecosystem …
Twitter | X: cyberthint - New RaaS Platform Discovered: HYFLOCK