moneymessage
Activity analysis
HackerFeeds has tracked 36 victims claimed by moneymessage since January 2023, most recently in September 2026 — ranking #131 of 332 groups (0.1% of all tracked ransomware victims). It posted 2 victims in the last 90 days, down 60% on the previous 90 days (5). Its most-targeted sector is Manufacturing (7 victims), followed by Healthcare (5). The United States accounts for 13 victims (65% of those with a known location); 16 victims did not disclose a location.
Victims per year
- 202318
- 20246
- 20254
- 20268
Top sectors
- Manufacturing7
- Healthcare5
- Business Services5
- Public Sector4
- Financial Services3
- Transportation/Logistics2
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Money Message emerged in March 2023 targeting Windows and Linux systems across banking, transportation, and professional services sectors, demanding ransoms in the millions and publishing stolen data on their blog if unpaid, with most known victims based in the US.
Recent victims
No victims tracked yet.