sign in--:--:--UTC

Apt73

Also known as Wolves of Turan

Reports

12

First seen

May 21

Last seen

Jun 23

Motivation

extortion, financial

Targeting

Sectors

government ×4other ×2transportation logistics ×1healthcare ×1media entertainment ×1

Victim regions

Armenia ×2Brazil ×1Austria ×1Türkiye ×1Mexico ×1Panama ×1Argentina ×1Thailand ×1

Indicators

domain ×22ip_v4 ×4hash_sha256 ×2hash_md5 ×1

Indicator values are available on Pro and via the API.

Recent reports

Apt73 publishes new victim: kliknklik.com

ransomware.liveJun 23 Critical

APT73 publishes Brazilian government victim on leak site

ransomware.liveJun 23 High

Apt73 claims Vienna Airport in ransomware extortion post

ransomware.liveJun 23 High

Apt73 publishes new victim: smarty.arpinet.am

ransomware.liveJun 3 High

Apt73 publishes elections.mia.gov.am victim claim on ransomware.live

ransomware.liveJun 2 High

Apt73 publishes Turkish government victim on ransomware.live

ransomware.liveMay 22 High

Apt73 publishes victim: minsa.com.mx

ransomware.liveMay 22 High

Apt73 claims TVN Media (Panama) in ransomware extortion

ransomware.liveMay 22 High

Apt73 claims Grupo Petersen as ransomware victim

ransomware.liveMay 21 High

Apt73 claims victim narit.or.th

ransomware.liveMay 21 High

Apt73 claims alkaloid.com.mk victim on ransomware.live

ransomware.liveMay 21 High

Apt73 publishes new victim: ungererandcompany.com

ransomware.liveMay 21

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans