DETECTO/ThreatDossier
DashboardPricingThreatsRun Free ScanSign In
DETECTO/ThreatDossier

Security intelligence for MSPs, consultants, and businesses. Find breached credentials, compliance gaps, and exposed infrastructure before attackers do.

Product

  • Scan a Domain
  • Pricing
  • Dashboard
  • Sign In

Resources

  • Threat Intelligence
  • Ransomware Groups

Legal

  • Privacy Policy
  • Terms of Service

© 2026 DETECTO. All rights reserved.

Threats/Groups/Warlock

Warlock

Dormant

warlock

First seen: 2025-06-11T11:51:02.519396+00:00Total victims: 78

The Warlock ransomware and operator(s) are believed to be attributed to Storm-2603, a China-based threat actor who is also known to have deployed LockBit ransomware. There's also a crossover between victims with Black Basta. Both are RaaS and have a long list of known and unknown affiliates. Having said that, this is possibly an affiliate (likely a cybergroup) of both of those groups. The Alliance & Association would technically be Encryptor Sharing, but this is realistically more of an "Old Affiliate" that created their own ransomware encryptor and operation.

0Total Victims
0Countries Targeted
0Sectors Targeted
0Avg Attacks/Month

Activity Timelinelast 24 months

Top Targeted Sectors

Top Targeted Countries

Recent Victimsshowing 50 of 78

NameCountrySectorDate
energogroup.netRUEnergy2025-11-06T07:49:34.261620+00:00
goldenline.comPLTechnology2025-11-06T07:49:10.754767+00:00
bengineered.com.auAUTechnology2025-11-06T07:48:46.550591+00:00
mnpease.caCANot Found2025-11-06T07:48:21.048779+00:00
metro.local—Not Found2025-11-06T07:47:56.214823+00:00
cybervector.co.ukGBTechnology2025-11-06T07:47:31.415334+00:00
fabrity.localPLNot Found2025-11-06T07:47:07.274825+00:00
miltech.localISNot Found2025-11-06T07:46:42.010616+00:00
mytune.meMYNot Found2025-11-06T07:46:15.500903+00:00
atg.czCZTechnology2025-11-06T07:45:50.893444+00:00
tein.co.jpJPTechnology2025-11-06T07:45:46.784200+00:00
bel.quadra.ruRUNot Found2025-11-06T07:45:20.785280+00:00
ippm.orgGBNot Found2025-11-06T07:44:56.899690+00:00
sf.walltopia.comUSNot Found2025-11-06T07:44:22.355830+00:00
nartis.ruRUNot Found2025-11-06T07:43:57.489661+00:00
alphasys.boBONot Found2025-11-06T07:43:32.956802+00:00
silanosn.local—Not Found2025-11-06T07:43:07.894585+00:00
siball.netRUTechnology2025-09-23T16:26:16.597429+00:00
chroma.com.twTWTechnology2025-09-16T05:30:00.055212+00:00
ferus-smit.homeNLManufacturing2025-09-16T05:29:36.114766+00:00
jubileelife.comPKFinancial Services2025-09-16T05:29:11.186812+00:00
kmssa.netSANot Found2025-09-16T05:28:47.449817+00:00
webville.netUSTechnology2025-09-16T05:28:23.769134+00:00
elssurveying.comUSConstruction2025-09-16T05:27:57.120925+00:00
medkar.comTRHealthcare2025-09-16T05:27:33.254237+00:00
okan.ruRUFinancial Services2025-09-08T17:45:32.363033+00:00
mffood.comDKAgriculture and Food Production2025-09-01T16:08:28.574881+00:00
gmpc.comUSNot Found2025-09-01T16:08:04.031146+00:00
airfastindonesia.comIDTransportation/Logistics2025-08-25T16:58:04.704808+00:00
infoniqa.comATTechnology2025-08-18T17:46:17.646552+00:00
gmtaconlinePHNot Found2025-08-17T09:24:46.149359+00:00
woodboure—Not Found2025-08-17T09:24:42.467455+00:00
STRGOME—Not Found2025-08-17T09:24:37.355899+00:00
argeninta—Not Found2025-08-17T09:24:33.169183+00:00
houraFRBusiness Services2025-08-17T09:24:28.580760+00:00
houxtGBNot Found2025-08-17T09:24:24.965075+00:00
getdomainDKNot Found2025-08-17T09:24:21.278642+00:00
kiplINBusiness Services2025-08-17T09:24:18.435091+00:00
nsziHRNot Found2025-08-17T09:24:15.446238+00:00
accsnet.comJPTechnology2025-08-17T09:24:10.672850+00:00
advion.comUSTechnology2025-08-17T09:23:46.852692+00:00
mysecop.com—Technology2025-08-17T09:23:23.155805+00:00
atcmanufacturingUSManufacturing2025-08-17T09:22:59.172917+00:00
orange.comFRTelecommunication2025-08-17T09:22:54.931859+00:00
anthembio.comUSHealthcare2025-08-17T09:22:51.077276+00:00
syspro.comUSTechnology2025-08-17T09:22:27.150157+00:00
brightwork.comUSTechnology2025-08-17T09:22:02.040254+00:00
starsalliance.com—Not Found2025-08-17T09:21:35.406838+00:00
sipecom.comECTechnology2025-08-17T09:21:11.726856+00:00
wytechnology.local—Technology2025-08-17T09:20:47.877261+00:00

Data from ransomware.live