frag
Activity analysis
HackerFeeds has tracked 30 victims claimed by frag since September 2024, most recently in June 2025 — ranking #145 of 332 groups (0.1% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in June 2025. Its most-targeted sector is Business Services (7 victims), followed by Manufacturing (5). The United States accounts for 20 victims (69% of those with a known location); 1 victims did not disclose a location.
Victims per year
- 202421
- 20259
Top sectors
- Business Services7
- Manufacturing5
- Financial Services4
- Technology3
- Construction3
- Transportation/Logistics2
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Frag is a ransomware group that emerged in late 2024, exploiting a critical Veeam Backup & Replication vulnerability (CVE-2024-40711) to compromise targets in industrial sectors, with blockchain analysis linking it to a shared wallet cluster with the Akira group.
Recent victims
No victims tracked yet.

