DETECTO/ThreatDossier
DashboardPricingThreatsRun Free ScanSign In
DETECTO/ThreatDossier

Security intelligence for MSPs, consultants, and businesses. Find breached credentials, compliance gaps, and exposed infrastructure before attackers do.

Product

  • Scan a Domain
  • Pricing
  • Dashboard
  • Sign In

Resources

  • Threat Intelligence
  • Ransomware Groups

Legal

  • Privacy Policy
  • Terms of Service

© 2026 DETECTO. All rights reserved.

Threats/Groups/Helldown

Helldown

Inactive

helldown

First seen: 2024-08-13T07:23:22.833134+00:00Total victims: 36

Helldown is an aggressive ransomware group first documented in August 2024, known for exploiting Zyxel firewall vulnerabilities to gain initial access and conducting large-scale data exfiltration averaging 70 GB per victim, targeting IT services, telecommunications, manufacturing, and healthcare primarily in the US.

0Total Victims
0Countries Targeted
0Sectors Targeted
0Avg Attacks/Month

Activity Timelinelast 24 months

Top Targeted Sectors

Top Targeted Countries

Recent Victimsshowing 36 of 36

NameCountrySectorDate
klinkamkurparkDEHealthcare2024-11-06T23:40:11.858876+00:00
hausdesstiftens.orgDEHealthcare2024-11-06T23:38:54.605970+00:00
nightnurse.chCHHealthcare2024-11-06T23:35:45.423611+00:00
fuelco—Energy2024-11-06T23:32:28.206634+00:00
VALLEYFIRMHKBusiness Services2024-11-06T23:29:16.581363+00:00
childrenINConsumer Services2024-11-06T23:26:07.753681+00:00
knoxlawcenterUSBusiness Services2024-11-06T23:23:00.805321+00:00
AMERICANVENTUREUSBusiness Services2024-11-06T23:19:54.418430+00:00
CSIKBSJPConsumer Services2024-11-06T23:16:46.114712+00:00
SANJACINTOCOUNYUSPublic Sector2024-11-06T23:13:42.346201+00:00
compassfsUSFinancial Services2024-11-06T23:12:35.602027+00:00
lacliniqueducoureurCAHealthcare2024-11-06T23:09:28.876266+00:00
TIVOLI-33FRHealthcare2024-11-06T23:06:10.016328+00:00
qualiform.czCZManufacturing2024-11-06T23:03:04.228485+00:00
SMARTS-ENGINEERRUTechnology2024-11-06T22:59:50.643159+00:00
HBGJEWISHCOMMUNUSConsumer Services2024-08-24T15:12:42.620532+00:00
barryavenueplatingUSManufacturing2024-08-23T15:45:26.287637+00:00
cincinnatipainphysiciansUSHealthcare2024-08-22T17:11:06.849351+00:00
kbosecurity.co.ukGBBusiness Services2024-08-22T03:14:08.327627+00:00
khonaysser.comLBEnergy2024-08-22T03:12:33.672110+00:00
BARRYAVEPLATINGUSManufacturing2024-08-21T16:07:54.865581+00:00
RSK-IMMOBILIENDEBusiness Services2024-08-21T16:06:31.690861+00:00
ATPITBusiness Services2024-08-20T16:06:00.662589+00:00
KhonaysserLBEnergy2024-08-19T16:44:05.189226+00:00
kboGBNot Found2024-08-18T17:04:24.900720+00:00
zyxelNLTechnology2024-08-17T14:01:12.232298+00:00
hugwiCHTechnology2024-08-14T02:07:19.358646+00:00
SCHLATTNERDENot Found2024-08-13T18:26:36.975174+00:00
deganisFRBusiness Services2024-08-13T18:23:30.084450+00:00
XPERT Business Solutions GmbHATBusiness Services2024-08-13T07:36:35.837121+00:00
MyFreightWorldUSTransportation/Logistics2024-08-13T07:35:27.513780+00:00
cbmmBRManufacturing2024-08-13T07:34:11.841426+00:00
AZIENDA TRASPORTI PUBBLICI S.P.A.ITTransportation/Logistics2024-08-13T07:30:56.699609+00:00
brijuPLBusiness Services2024-08-13T07:29:43.625691+00:00
vindixPLNot Found2024-08-13T07:26:33.309854+00:00
AlbatrosITNot Found2024-08-13T07:23:22.833134+00:00

Data from ransomware.live