spook
First seen October 4, 2021Active35 claimed victims
The claims below are reproduced as posted by spook on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Spook ransomware operated briefly in September–October 2021 as a rebrand of the Prometheus ransomware group (built on the Thanos builder), conducting double-extortion attacks against global targets with a concentration in manufacturing and unusually publishing all victim names regardless of ransom payment.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Page Automation | October 19, 2021 | ransomware_live | — |
| All County Surveying Inc | October 19, 2021 | ransomware_live | — |
| North Island | October 19, 2021 | ransomware_live | — |
| Grupo Vía | October 18, 2021 | ransomware_live | — |
| Toos Asphalt Company | October 18, 2021 | ransomware_live | — |
| Apex Filling Systems | October 16, 2021 | ransomware_live | — |
| NOF CORPORATION | October 16, 2021 | ransomware_live | — |
| Princess Yachts International | October 13, 2021 | ransomware_live | — |
| Paris Society | October 12, 2021 | ransomware_live | — |
| Neofidelys | October 12, 2021 | ransomware_live | — |
| Ferretti International | October 11, 2021 | ransomware_live | — |
| VKP | October 11, 2021 | ransomware_live | — |
| Sbc Studio | October 10, 2021 | ransomware_live | — |
| CABINET FONT GUILLOT | October 10, 2021 | ransomware_live | — |
| Kurier | October 9, 2021 | ransomware_live | — |
| TV FUEGO | October 9, 2021 | ransomware_live | — |
| Audras & Delaunois | October 9, 2021 | ransomware_live | — |
| La SECAN | October 8, 2021 | ransomware_live | — |
| Kern Glass and Aluminum Company | October 8, 2021 | ransomware_live | — |
| Gestão Contabilidade Empresarial | October 7, 2021 | ransomware_live | — |
| MOLNÁRBETON Kft. | October 6, 2021 | ransomware_live | — |
| Legendary, Inc. | October 5, 2021 | ransomware_live | — |
| Cock Foods Co., Ltd. | October 5, 2021 | ransomware_live | — |
| COURTOISE MOTORS | October 5, 2021 | ransomware_live | — |
| Verhoff Machine & Welding | October 4, 2021 | ransomware_live | — |
| Transports Verlhac et Fils | October 4, 2021 | ransomware_live | — |
| ASISMED S.A. | October 4, 2021 | ransomware_live | — |
| Pierce Property Management, Inc. | October 4, 2021 | ransomware_live | — |
| VIASHOPPING | October 4, 2021 | ransomware_live | — |
| ORLANDO IMPORT-EXPORT 2001 SRL | October 4, 2021 | ransomware_live | — |
| I’M CORPORATION(SUZHOU)CO.,LTD | October 4, 2021 | ransomware_live | — |
| TOA ELECTRIC INDUSTRIAL CO., LTD. | October 4, 2021 | ransomware_live | — |
| Van Dijk De Jongh Notarissen | October 4, 2021 | ransomware_live | — |
| GLOBAL PROTEIN | October 4, 2021 | ransomware_live | — |
| Sashida warehouse CO., Ltd | October 4, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).