Aurora

Reports

First seen

May 12

Last seen

Jun 23

Motivation

extortion, financial, financial extortion

Targeting

Sectors

manufacturing ×6energy utilities ×2financial services ×1professional services ×1retail ecommerce ×1agriculture ×1

Victim regions

United States ×5Germany ×2Canada ×2Peru ×1Austria ×1Netherlands ×1Australia ×1

Top ATT&CK techniques

T1041 Exfiltration Over C2 Channel ×2T1560 Archive Collected Data ×2T1005 Data from Local System ×2

Indicators

domain ×14

Indicator values are available on Pro and via the API.

Recent reports

Critical

Aurora ransomware gang claims breach of ALS Global, exfiltrates 20 GB+ of proprietary data

ransomware.liveJun 19 High

Aurora ransomware claims Allan Brothers Fruit as victim

ransomware.liveJun 16 High

Aurora ransomware gang publishes Diamond Truck Centres data

ransomware.liveJun 16 High

Aurora claims breach of Sumitomo Electric Industries subsidiary, exfiltrates 1.1 TB

ransomware.liveJun 16 Critical

Aurora ransomware publishes Avanti Windows & Doors breach

ransomware.liveMay 12 High

Aurora ransomware gang publishes Startec Group of Companies victim

ransomware.liveMay 12 Critical

Aurora ransomware publishes NorthWest Handling Systems data

ransomware.liveMay 12

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Top ATT&CK techniques

Indicators

Recent reports

Aurora ransomware publishes Corporación Primax S.A. data

Aurora ransomware publishes Aerospace & Advanced Composites GmbH data

Aurora ransomware gang claims NTP B.V. Civil Engineering Construction as victim

Aurora ransomware gang publishes Kochs GmbH breach

Aurora ransomware gang claims NationsBuilders Insurance Services victim