rancoz
Activity analysis
HackerFeeds has tracked 6 victims claimed by rancoz since May 2023, most recently in September 2023 — ranking #251 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in September 2023. Its most-targeted sector is Manufacturing (3 victims), followed by Technology (1).
Victims per year
- 20236
Top sectors
- Manufacturing3
- Technology1
- Construction1
- Business Services1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Rancoz is a Windows-targeting ransomware strain first observed in November 2022 that appends the ".rec_rans" extension to encrypted files, considered a Vice Society copycat, deployed against a small number of organizations using double extortion and linked to the same developer as the "Buddy" ransomware.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2023-09-03 |  DDB Unlimited (ddbunlimited.com)ddbunlimited.com | Manufacturing | |
| 2023-09-03 |  Rick Ramos Law (rickramoslaw.com)rickramoslaw.com | Professional Services | |
| 2023-07-07 |  Industrial Heat Transfer (iht-inc.com)iht-inc.com | Manufacturing | |
| 2023-06-14 |  Air Comfort (aircomfort.ac)aircomfort.ac | Hospitality | |
| 2023-05-05 |  RIC Electronics (ricelectronics.com)ricelectronics.com | Manufacturing | |
| 2023-05-05 |  TrueLogic (truelogiccompany.com)truelogiccompany.com | Technology |