DETECTO/ThreatDossier
DashboardPricingThreatsRun Free ScanSign In
DETECTO/ThreatDossier

Security intelligence for MSPs, consultants, and businesses. Find breached credentials, compliance gaps, and exposed infrastructure before attackers do.

Product

  • Scan a Domain
  • Pricing
  • Dashboard
  • Sign In

Resources

  • Threat Intelligence
  • Ransomware Groups

Legal

  • Privacy Policy
  • Terms of Service

© 2026 DETECTO. All rights reserved.

Threats/Groups/Doppelpaymer

Doppelpaymer

Inactive

doppelpaymer

First seen: 2019-05-25 00:00:00.000000Total victims: 25

Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files. It is recognizable by its trademark file extension added to encrypted files: .doppeled. It also creates a note file named: ".how2decrypt.txt".

0Total Victims
0Countries Targeted
0Sectors Targeted
0Avg Attacks/Month

Activity Timelinelast 24 months

Top Targeted Sectors

Top Targeted Countries

Recent Victimsshowing 25 of 25

NameCountrySectorDate
Office of the Attorney GeneralUSGovernment Facilities2021-04-10 00:00:00.000000
Azusa police departmentUSGovernment Facilities2021-03-01 00:00:00.000000
ManutanFRCritical Manufacturing2021-02-21 00:00:00.000000
Kia Motors America (KMA)USCritical Manufacturing2021-02-16 00:00:00.000000
Cuyahoga Metropolitan Housing AuthorityUSGovernment Facilities2021-02-08 00:00:00.000000
FoxconnMXCritical Manufacturing2020-11-29 00:00:00.000000
Delaware CountyUSGovernment Facilities2020-11-28 00:00:00.000000
Compal—Critical Manufacturing2020-11-08 00:00:00.000000
Banijay Group SASFRCommunication2020-11-01 00:00:00.000000
Chatham County GovernmentUSGovernment Facilities2020-10-28 00:00:00.000000
Hall CountyUSGovernment Facilities2020-10-07 00:00:00.000000
Newcastle University—Education Facilities2020-08-30 00:00:00.000000
4 Canadian courier divisions of TFI International's Canpar ExpressCATransportation Systems2020-08-19 00:00:00.000000
Boyce Technologies (device manufacturer- transit communication systems and now ventilators b/c of COVID-19)USCritical Manufacturing2020-08-01 00:00:00.000000
Knoxville PD and City of Knoxville, TN (Knox County)USGovernment Facilities2020-06-11 00:00:00.000000
City of Florence, AlabamaUSGovernment Facilities2020-06-05 00:00:00.000000
Digital Management Inc. (NASA Contractor)USInformation Technology2020-06-03 00:00:00.000000
Mitsubishi—Critical Manufacturing2020-06-01 00:00:00.000000
AfpaFREducation2020-04-17 00:00:00.000000
KimchukUSCritical Manufacturing2020-03-05 00:00:00.000000
City of Torrance (Los Angeles County)USGovernment Facilities2020-03-01 00:00:00.000000
Visser PrecisionUSCritical Manufacturing2020-02-01 00:00:00.000000
Bretagne TelecomFRCommunication2020-01-01 00:00:00.000000
Chilean Ministry of AgricultureCLFood and Agriculture2019-06-01 00:00:00.000000
City of EdcouchUSGovernment Facilities2019-05-25 00:00:00.000000

Data from ransomware.live