avaddon
First seen February 1, 2021Active146 claimed victims
The claims below are reproduced as posted by avaddon on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Avaddon is a ransomware malware targeting Windows systems often spread via malicious spam. The first known attack where Avaddon ransomware was distributed was in February 2020. Avaddon encrypts files using the extension .avdn and uses a TOR payment site for the ransom payment.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| VERIHA TRUCKING INC | September 9, 2021 | ransomware_live | — |
| Grand Power Systems | September 9, 2021 | ransomware_live | — |
| Carnegie Wave Energy | September 9, 2021 | ransomware_live | — |
| JFC International (Europe) | September 9, 2021 | ransomware_live | — |
| Mullins Food Products Inc | September 9, 2021 | ransomware_live | — |
| The Capital Medical Center | September 9, 2021 | ransomware_live | — |
| UNIVERSAL ACCOUNTING SERVICES INC | September 9, 2021 | ransomware_live | — |
| SVI ASSURANCES | September 9, 2021 | ransomware_live | — |
| MundoFertil | September 9, 2021 | ransomware_live | — |
| Elite Software Inc | September 9, 2021 | ransomware_live | — |
| BEE LINE LOGISTICS, INC | September 9, 2021 | ransomware_live | — |
| KEITH MACHINERY CORP. | September 9, 2021 | ransomware_live | — |
| Hardy Buoys Smoked Fish Inc. | September 9, 2021 | ransomware_live | — |
| FBL Advogados | September 9, 2021 | ransomware_live | — |
| Somerset ISD | September 9, 2021 | ransomware_live | — |
| Groupe Qualinet Inc. | September 9, 2021 | ransomware_live | — |
| VAUGHN CONCRETE PRODUCTS, INC | September 9, 2021 | ransomware_live | — |
| PT Asuransi Bintang Tbk | September 9, 2021 | ransomware_live | — |
| American Heart of Poland Inc | September 9, 2021 | ransomware_live | — |
| Allanasons Ltd | September 9, 2021 | ransomware_live | — |
| MK-Technik | September 9, 2021 | ransomware_live | — |
| BIOREP TECHNOLOGIES, INC. | September 9, 2021 | ransomware_live | — |
| Finalyse | September 9, 2021 | ransomware_live | — |
| Marolles-en-Brie | September 9, 2021 | ransomware_live | — |
| International Longshore & Warehouse Union | September 9, 2021 | ransomware_live | — |
| Payzant Building Products Ltd | September 9, 2021 | ransomware_live | — |
| Intensive Care On-Line Network , Inc | September 9, 2021 | ransomware_live | — |
| NetVigour Inc | September 9, 2021 | ransomware_live | — |
| Garvin Promotion Group, LLC | September 9, 2021 | ransomware_live | — |
| AHT Global | September 9, 2021 | ransomware_live | — |
| KOE | September 9, 2021 | ransomware_live | — |
| Dade City Florida | September 9, 2021 | ransomware_live | — |
| Monterey Bay Air Resources District | September 9, 2021 | ransomware_live | — |
| National AIDS Control Council | September 9, 2021 | ransomware_live | — |
| Brown Robert LLP | September 9, 2021 | ransomware_live | — |
| American Bank Systems INC | September 9, 2021 | ransomware_live | — |
| Lonrho | September 9, 2021 | ransomware_live | — |
| J.C. Cannistraro | September 9, 2021 | ransomware_live | — |
| Golden Aluminum | September 9, 2021 | ransomware_live | — |
| Sky Leasing, LLC | September 9, 2021 | ransomware_live | — |
| EFCO forms | September 9, 2021 | ransomware_live | — |
| Town of Freeport | June 8, 2021 | ransomware_live | — |
| AXA (insurance) | May 1, 2021 | ransomware_live | — |
| Presque Isle Police Department | April 18, 2021 | ransomware_live | — |
| Capital Medical Center | February 1, 2021 | ransomware_live | — |
| Carnegie Clean Energy | February 1, 2021 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).