vanhelsing
Activity analysis
HackerFeeds has tracked 8 victims claimed by vanhelsing since March 2025, most recently in April 2025 — ranking #228 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in April 2025. Its most-targeted sector is Technology (2 victims), followed by Healthcare (2). The United States accounts for 4 victims (50% of those with a known location).
Victims per year
- 20258
Top sectors
- Technology2
- Healthcare2
- Business Services2
- Public Sector1
- Financial Services1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
VanHelsing is a multi-platform RaaS operation that launched on March 7, 2025, requiring a $5,000 affiliate deposit and splitting ransoms 80/20, supporting Windows, Linux, BSD, ARM, and ESXi targets, reaching at least five victims across the US, France, Italy, and Australia within its first two months.
Recent victims
No victims tracked yet.