raworld
Also known as: ragroupFirst seen May 6, 2023Active125 claimed victims
The claims below are reproduced as posted by raworld on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
RA Group, also known as RA World, first surfaced in April 2023, utilizing a custom variant of the Babuk ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| 24****r | September 4, 2023 | ransomware_live | — |
| I****n | September 4, 2023 | ransomware_live | — |
| Yuxin Automobile Co.Ltd (裕信汽車) | September 4, 2023 | ransomware_live | — |
| Piex Group | September 4, 2023 | ransomware_live | — |
| Zurvita | September 4, 2023 | ransomware_live | — |
| Yuxin Automobile Co.Ltd(裕信汽車) | September 1, 2023 | ransomware_live | — |
| I****n | August 29, 2023 | ransomware_live | — |
| 2****r | August 29, 2023 | ransomware_live | — |
| Y****e | August 29, 2023 | ransomware_live | — |
| Zurvita | August 29, 2023 | ransomware_live | — |
| Z****ta | August 4, 2023 | ransomware_live | — |
| P****X | August 4, 2023 | ransomware_live | — |
| Decimal Point Analytics Pvt | July 30, 2023 | ransomware_live | — |
| Bluelinea | July 30, 2023 | ransomware_live | — |
| De****int | July 25, 2023 | ransomware_live | — |
| Bl****ea | July 24, 2023 | ransomware_live | — |
| Thaire | June 28, 2023 | ransomware_live | — |
| Target-9 | June 21, 2023 | ransomware_live | — |
| Deepnoid | June 21, 2023 | ransomware_live | — |
| Target-8 | June 16, 2023 | ransomware_live | — |
| Eastern Media International Corporation | May 25, 2023 | ransomware_live | — |
| EyeGene | April 28, 2023 | ransomware_live | — |
| Bisco Industries | April 27, 2023 | ransomware_live | — |
| Wealth Enhancement Group | April 27, 2023 | ransomware_live | — |
| Insurance Providers Group | April 27, 2023 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).