All ransomware groups
vanhelsing
8 tracked victims
·first seen 2025-03-12·last activity 2025-04-05Group profile
VanHelsing is a multi-platform RaaS operation that launched on March 7, 2025, requiring a $5,000 affiliate deposit and splitting ransoms 80/20, supporting Windows, Linux, BSD, ARM, and ESXi targets, reaching at least five victims across the US, France, Italy, and Australia within its first two months.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-04-05 |  caschile.clcaschile.cl | Financial Services | CL |
| 2025-03-31 |  attorneykohm.comattorneykohm.com | Business Services | US |
| 2025-03-31 |  alertenterprise.comalertenterprise.com | Technology | US |
| 2025-03-26 |  compumedics.com.au AND neuromedicalsupplies.comcompumedics.com.au | Healthcare | AU |
| 2025-03-24 |  studiocdlvallone.itstudiocdlvallone.it | Business Services | IT |
| 2025-03-19 |  www.medsrx.commedsrx.com | Healthcare | US |
| 2025-03-18 |  Atos-racks.comAtos-racks.com | Technology | FR |
| 2025-03-12 |  www.cityofbellville.comcityofbellville.com | Public Sector | US |