avoslocker
First seen June 13, 2021Active70 claimed victims
The claims below are reproduced as posted by avoslocker on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
AvosLocker is the ransomware payload of the Avos RaaS group, active from July 2021 to approximately May 2023, targeting education, manufacturing, and healthcare sectors on Windows, Linux, and VMware ESXi environments, with the US accounting for ~72% of victims.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Hamilton Parker | February 11, 2023 | ransomware_live | — |
| Ultralife Corporation | February 11, 2023 | ransomware_live | — |
| Schandy | February 11, 2023 | ransomware_live | — |
| CannonDesign | February 11, 2023 | ransomware_live | — |
| Wesco Turf | February 11, 2023 | ransomware_live | — |
| Buckeye Packaging | February 11, 2023 | ransomware_live | — |
| Global Mining Products | February 11, 2023 | ransomware_live | — |
| Memtech Acoustical | February 11, 2023 | ransomware_live | — |
| Cambian Group | February 11, 2023 | ransomware_live | — |
| Corporate Interiors Inc | January 7, 2023 | ransomware_live | — |
| ALVAC SA | December 26, 2022 | ransomware_live | — |
| Cosmopoint College | December 26, 2022 | ransomware_live | — |
| DLS Motors | December 26, 2022 | ransomware_live | — |
| Hughes Systems Industrial | December 26, 2022 | ransomware_live | — |
| Zeus Scientific Inc | December 26, 2022 | ransomware_live | — |
| American International Industry | December 26, 2022 | ransomware_live | — |
| Emtec Inc | December 26, 2022 | ransomware_live | — |
| Northwest University | December 26, 2022 | ransomware_live | — |
| Paul Smiths College | December 26, 2022 | ransomware_live | — |
| Our Lady of Lake University | December 26, 2022 | ransomware_live | — |
| Xybion | December 26, 2022 | ransomware_live | — |
| Stratford University | December 26, 2022 | ransomware_live | — |
| Sunland Asphalt And Construction | December 26, 2022 | ransomware_live | — |
| TeladanPrima Argo Group | December 26, 2022 | ransomware_live | — |
| Truckslogic | December 26, 2022 | ransomware_live | — |
| SCAD EDU | December 26, 2022 | ransomware_live | — |
| The Brigantine | December 26, 2022 | ransomware_live | — |
| Khoemacau Copper Mining | December 26, 2022 | ransomware_live | — |
| Mount Vernon Mills | December 26, 2022 | ransomware_live | — |
| Los Alamos Nature Center | December 26, 2022 | ransomware_live | — |
| WBSCHOOLS | December 26, 2022 | ransomware_live | — |
| Casa International | December 26, 2022 | ransomware_live | — |
| Garnica Plywood | December 26, 2022 | ransomware_live | — |
| Transform Data Into Insight | December 26, 2022 | ransomware_live | — |
| Montmorency College | December 26, 2022 | ransomware_live | — |
| Bechstein | December 26, 2022 | ransomware_live | — |
| CR2 | December 26, 2022 | ransomware_live | — |
| Livingston | December 26, 2022 | ransomware_live | — |
| CPA Mutual Insurance Company | December 26, 2022 | ransomware_live | — |
| BLUME GLOBAL INC | December 26, 2022 | ransomware_live | — |
| CHRISTUS Health | December 26, 2022 | ransomware_live | — |
| TPI Corporation | December 26, 2022 | ransomware_live | — |
| Public Employees Credit Union | December 26, 2022 | ransomware_live | — |
| LPA Design | December 26, 2022 | ransomware_live | — |
| Chimbusco | December 26, 2022 | ransomware_live | — |
| CMHA National | December 26, 2022 | ransomware_live | — |
| Yildiz Entegre USA | December 26, 2022 | ransomware_live | — |
| Avamere Family of Companies | December 26, 2022 | ransomware_live | — |
| McKenzie Health System | December 26, 2022 | ransomware_live | — |
| Keyano College | December 26, 2022 | ransomware_live | — |
| LW Group | December 26, 2022 | ransomware_live | — |
| Memory Express | September 26, 2021 | ransomware_live | — |
| Amphenol Canada | September 25, 2021 | ransomware_live | — |
| Unified Technologies | September 25, 2021 | ransomware_live | — |
| Whitefish River First Nation | September 25, 2021 | ransomware_live | — |
| Huali Industrial Group | September 25, 2021 | ransomware_live | — |
| Pacific City Bank | September 4, 2021 | ransomware_live | — |
| Moorfields NHS UK & Dubai | September 1, 2021 | ransomware_live | — |
| Potter Concrete | September 1, 2021 | ransomware_live | — |
| Master Chemical | August 29, 2021 | ransomware_live | — |
| Artas Holding / Artas Insaat | August 28, 2021 | ransomware_live | — |
| Home in Brussels | August 28, 2021 | ransomware_live | — |
| Coghlin Electrical Contractors | August 28, 2021 | ransomware_live | — |
| On logistics Services Algeciras, S.L | August 28, 2021 | ransomware_live | — |
| SoftwareDesign Consulting Group | August 19, 2021 | ransomware_live | — |
| Gimmler Gruppe | August 19, 2021 | ransomware_live | — |
| Mauck & Baker | August 5, 2021 | ransomware_live | — |
| Geneva, Ohio | June 18, 2021 | ransomware_live | — |
| Heller Injury Lawyers | June 13, 2021 | ransomware_live | — |
| Arabian Cargo Group | June 13, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).