All ransomware groups
benzona
14 tracked victims
·first seen 2025-11-26·last activity 2026-01-30Group profile
Benzona is a financially motivated ransomware group that emerged in late 2024, targeting small to mid-sized organizations across manufacturing, healthcare, technology, and hospitality sectors using double-extortion tactics — encrypting files while exfiltrating data and threatening publication via a Tor-based leak site.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-01-30 |  casamedica.com.gtcasamedica.com.gt | Healthcare | GT |
| 2026-01-22 |  empreinte-hotel.comempreinte-hotel.com | Hospitality and Tourism | FR |
| 2026-01-22 | * *a*ame*i*a.com.g**a*ame*i*a.com.g* | Not Found | |
| 2026-01-17 |  ccbrt.orgccbrt.org | Healthcare | TZ |
| 2026-01-17 |  em***int*-ho***.comem***int*-ho***.com | Not Found | |
| 2026-01-12 | C cc***.or.*zcc***.or.*z | Not Found | |
| 2025-12-22 |  taminsho.comtaminsho.com | Not Found | IR |
| 2025-12-06 |  platinumone.inplatinumone.in | Technology | IN |
| 2025-12-03 |  SUNNYGO.COM.TWSUNNYGO.COM.TW | Consumer Services | TW |
| 2025-11-26 |  suzuki-ploiesti.rosuzuki-ploiesti.ro | Manufacturing | RO |
| 2025-11-26 |  poliserv.ropoliserv.ro | Not Found | RO |
| 2025-11-26 |  mazda-ploiesti.romazda-ploiesti.ro | Manufacturing | RO |
| 2025-11-26 |  dacia-ploiesti.rodacia-ploiesti.ro | Not Found | RO |
| 2025-11-26 |  sevci.orgsevci.org | Healthcare | CI |