HackerFeeds
All ransomware groups

frag

30 tracked victims
·first seen 2024-09-24·last activity 2025-06-12

Activity analysis

HackerFeeds has tracked 30 victims claimed by frag since September 2024, most recently in June 2025 — ranking #145 of 332 groups (0.1% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in June 2025. Its most-targeted sector is Business Services (7 victims), followed by Manufacturing (5). The United States accounts for 20 victims (69% of those with a known location); 1 victims did not disclose a location.

Victims per year

  • 202421
  • 20259

Top sectors

  • Business Services7
  • Manufacturing5
  • Financial Services4
  • Technology3
  • Construction3
  • Transportation/Logistics2

Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology

Group profile

Frag is a ransomware group that emerged in late 2024, exploiting a critical Veeam Backup & Replication vulnerability (CVE-2024-40711) to compromise targets in industrial sectors, with blockchain analysis linking it to a shared wallet cluster with the Akira group.

Recent victims

No victims tracked yet.