HackerFeeds
All ransomware groups

underground

26 tracked victims
·first seen 2023-05-30·last activity 2025-08-15

Group profile

Underground ransomware is deployed by the Russia-based RomCom group (Storm-0978) and has victimized companies across multiple industries since July 2023 by exploiting CVE-2023-36884, encrypting files without changing extensions and deleting Volume Shadow Copies and Windows event logs in double-extortion campaigns.

Recent victims

DateWebsite / victimSectorCountry
2025-08-15
sfa.co.kr
SFA Engineeringsfa.co.kr
TechnologyKR
2025-06-25
gmors.com
GMORS Co., Ltdgmors.com
ManufacturingTW
2025-02-13
afasystemsinc.com
Afa Systems Ltd.afasystemsinc.com
TechnologyCA
2025-04-08
shengyusteel.com
shengyusteel.comshengyusteel.com
ManufacturingTW
2025-04-15
semex.com
semex.comsemex.com
Agriculture and Food ProductionCA
2024-12-16
simmtech.com
Simmtech Co., Ltd.simmtech.com
TechnologyKR
2024-10-25
hcsgcorp.com
hcsgcorp.comhcsgcorp.com
HealthcareUS
2024-10-09
casio.co.jp
Casio Computer Co., Ltdcasio.co.jp
TechnologyJP
2024-07-03
ramservices.com
ramservices.comramservices.com
Business ServicesUS
2024-06-20HealthcareFR
2024-05-24
alinestaffing.com
A-Line Staffing Solutionsalinestaffing.com
HealthcareUS
2024-05-04
belcherpharma.com
belcherpharma.combelcherpharma.com
HealthcareUS
2024-05-15
centralsecurities.com
CentralSecurities.comcentralsecurities.com
Financial ServicesUS
2024-05-04
belcherpharma.com
www.belcherpharma.combelcherpharma.com
HealthcareUS
2024-02-23
kc.co.kr
kc.co.krkc.co.kr
TechnologyKR
2023-07-14
bulldogbag.com
bulldogbag.combulldogbag.com
ManufacturingCA
2023-07-18
F
frenckengroup.com
ManufacturingSG
2023-05-30
synology.com
synology.comsynology.com
TechnologyDE
2023-07-04
tpa-group.sk
tpa-group.sktpa-group.sk
Business ServicesSK
2024-01-26
triathlon.group
Triathlon.grouptriathlon.group
Transportation/LogisticsDE
2024-01-25
awwg.com
awwg.comawwg.com
Business ServicesES
2024-03-06
K
KyungChang
Manufacturing
2024-03-14
yhata.com
Y. Hata & Co., Ltd.yhata.com
Agriculture and Food ProductionUS
2024-03-21
skender.com
Skender Constructionskender.com
Business ServicesUS
2024-03-17
creativebusinessinteriors.com
Creative Business Interiorscreativebusinessinteriors.com
Business ServicesUS
2024-04-15
cochraneglobal.com
cochraneglobal.comcochraneglobal.com
TechnologyAE