All ransomware groups
imncrew
12 tracked victims
·first seen 2025-05-05·last activity 2025-09-16Group profile
IMN Crew is a data extortion and ransomware group that emerged in late March 2025, primarily targeting financial services organizations in the US, Croatia, and Indonesia by exploiting exposed perimeter services such as firewalls and VPNs, claiming at least five victims.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-09-16 |  Jansenfurniture.comJansenfurniture.com | Consumer Services | CA |
| 2025-08-02 |  Onegolditalia.itOnegolditalia.it | Manufacturing | IT |
| 2025-07-04 |  Apntelecom.comApntelecom.com | Telecommunication | US |
| 2025-06-14 |  Repremundo.com.coRepremundo.com.co | Business Services | CO |
| 2025-05-20 |  Stiga.comStiga.com | Consumer Services | SE |
| 2025-05-05 |  Synthesia.comSynthesia.com | Technology | CZ |
| 2025-05-05 |  Grupo Herradura Occidentegrupoherradura.com.mx | Manufacturing | MX |
| 2025-05-05 |  Croatianmint.hrCroatianmint.hr | Business Services | HR |
| 2025-05-05 |  Derp.orgDerp.org | Consumer Services | US |
| 2025-05-05 |  Abdainsurance.co.idAbdainsurance.co.id | Financial Services | ID |
| 2025-05-05 |  Vnakc.orgVnakc.org | Healthcare | US |
| 2025-05-05 |  Goodson.comGoodson.com | Manufacturing | US |