—:—:— UTC

Overview Ransomware CVEs Defacements Breaches Countries

All ransomware groups

Ghostsec

0 tracked victims

Overview Stats Groups Quadrants Map TTPs IOCs YARA Notes Nego Press Sectors CSIRTs Search

Recent victims

No victims tracked yet.

IOCs

ip (1)

94.103.91.246

sha256 (4)

36760e9bbfaf5a28ec7f85d13c7e8078a4ee4e5168b672639e97037d66eb1d17
8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9
8fa28795e4cd95e6c78c4a1308ea80674102669f9980b2006599d82eff6237b3
a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

url (5)

hxxp://94.103.91.246/addInfection
hxxp://94.103.91.246/incrementLaunch
hxxp://94.103.91.246/login?next=
hxxp://94.103.91.246/upload
hxxp://94.103.91.246/victimchat?id=[EncryptionID]

Group profile sourced from ransomware.live. HackerFeeds does not host stolen content; all data is awareness-only.

Unified threat intelligence across ransomware, CVEs, and defacements — pivot by country, actor, or source.

Platform

Overview
Ransomware
CVEs
Defacements
Breaches
Countries

Product

API keys
TAXII 2.1 / STIX 2.1
Integrations
Reports
Pricing

About

Privacy
Terms

© 2026 HackerFeeds·Open-source threat-intel aggregator