DETECTO/ThreatDossier
DashboardPricingThreatsRun Free ScanSign In
DETECTO/ThreatDossier

Security intelligence for MSPs, consultants, and businesses. Find breached credentials, compliance gaps, and exposed infrastructure before attackers do.

Product

  • Scan a Domain
  • Pricing
  • Dashboard
  • Sign In

Resources

  • Threat Intelligence
  • Ransomware Groups

Legal

  • Privacy Policy
  • Terms of Service

© 2026 DETECTO. All rights reserved.

Threats/Groups/Fog

Fog

Inactive

fog

First seen: 2024-07-16 21:42:07.920110Total victims: 189

Fog, which uses the .flocked extension for encrypted files, was first observed in May in campaigns by Storm-0844, a threat actor known for distributing Akira. By June, Storm-0844 was deploying Fog more than Akira.

0Total Victims
0Countries Targeted
0Sectors Targeted
0Avg Attacks/Month

Activity Timelinelast 24 months

Top Targeted Sectors

Top Targeted Countries

Recent Victimsshowing 50 of 189

NameCountrySectorDate
Newtown Friends School (newtownfriends.org)USEducation2025-03-20 14:02:12.582949
RAE (Real Academia Española) (rae.es)ESEducation2025-03-17 14:54:26.150096
University Diagnostic Medical Imaging, PC (udmi.net)USHealthcare2025-03-13 05:28:24.204859
El Camino Real Academy (elcaminorealacademy)—Education2025-03-13 01:00:37.074020
Wilkinson Rogers (wilkinsonrogers.com)—Not Found2025-03-11 01:28:18.293864
Magnolia Manor (magnoliamanor.com)USHealthcare2025-03-10 23:55:50.920360
WJCC Public Schools (wjccschools.org)USEducation2025-03-06 15:52:41.300364
Oberlin Cable Co-op (oberlin.net)USTelecommunication2025-03-06 12:43:56.692075
1X InternetDETechnology2025-03-06 02:10:41.540862
BizcodeITNot Found2025-03-06 02:09:11.112694
Manning Publications Co.USNot Found2025-03-06 02:07:41.363035
Engikam—Not Found2025-03-06 02:06:10.842417
FHNWCHEducation2025-03-06 02:04:34.844709
AeonsparxMYNot Found2025-03-06 02:03:02.416175
CIECZNot Found2025-03-06 02:01:31.902654
Flightsim studio—Technology2025-03-06 01:59:55.195641
NeopolyDENot Found2025-03-06 01:58:23.835457
Kr3mDENot Found2025-03-06 01:56:54.293035
InfoReachUSTechnology2025-03-06 01:55:23.678159
EuranovaBENot Found2025-03-06 01:53:49.556106
InelmaticESTechnology2025-03-06 01:52:19.498395
KotlivaRUNot Found2025-03-06 01:50:48.533868
InetTHNot Found2025-03-06 01:49:16.292692
Blue Planet—Not Found2025-03-06 01:47:47.374451
EumetsatDETechnology2025-03-06 01:46:16.132041
MelexisBETechnology2025-03-06 01:44:46.610464
USGSUSPublic Sector2025-03-06 01:42:49.052745
The 19 biggest gitlabs—Technology2025-03-05 23:55:01.894717
SCOLARO FETTER GRIZANTI & McGOUGH, P.C. (scolaro.com)USBusiness Services2025-03-05 17:53:40.557073
Pampili (pampili.com.br)BRConsumer Services2025-03-04 16:30:18.816044
Grupo Baston Aerossol (baston.com.br)BRManufacturing2025-03-04 15:02:20.007913
Central McGowan (centralmcgowan.com)USManufacturing2025-03-03 12:57:25.364042
Klesk Metal Stamping Co (kleskmetalstamping.com)USManufacturing2025-03-03 12:55:58.382726
Gitlabs: Synelixis Solutions, INGV, VMO Holdings—Technology2025-02-26 21:56:02.178146
BayteqECTechnology2025-02-23 18:47:35.910839
WDNAESTechnology2025-02-23 18:47:12.537320
NaphixAUTechnology2025-02-23 18:46:48.011590
Gitlabs: Naphix, WDNA, Bayteq——2025-02-23 18:22:40.164699
HochschuleDEEducation2025-02-19 15:01:28.634627
VISEOFRTechnology2025-02-19 15:01:04.020563
Next TIIDTechnology2025-02-19 14:54:45.123806
Haggin Oaks Golf (hagginoaks.com)USHospitality and Tourism2025-02-19 11:52:38.092602
Gitlabs: Next TI, VISEO, Hochschule Trier——2025-02-19 08:46:11.049744
Greencastle-Antrim Senior High School (gcasd.org)USEducation2025-02-17 14:21:57.450909
Pamrya.deDENot Found2025-02-16 11:05:15.383879
QBurstINTechnology2025-02-16 11:04:51.972779
Acqua developmentRONot Found2025-02-16 11:04:28.034838
Gitlabs: Acqua development, QBurst, Pamyra.de——2025-02-16 08:37:17.358069
ADULLACTFRTechnology2025-02-13 21:12:21.104507
AyomiFRNot Found2025-02-13 21:11:51.640536

Data from ransomware.live