Signalis
sign in--:--:--UTC
Threat actors

Crpxo

☆ pin
Reports
37
First seen
Jul 9, 2026
Last seen
Aug 2, 2026
Motivation
Financial

Targeting

Sectors
Healthcare ×11Financial Services ×6Professional Services ×3Manufacturing ×2Other ×2Technology ×1Hospitality ×1Media & Entertainment ×1
Victim regions
×1
×14
United States×14
Türkiye×6
United Kingdom×1
South Korea×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×39hash_sha256 ×3hash_sha1 ×1hash_md5 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Crpxo ransomware gang publishes Encore Enterprises, Inc. as victim

ransomware.liveHigh

Crpxo ransomware gang claims Kuveyt Turk as victim

ransomware.liveHigh

Crpxo ransomware gang publishes FINANSBANK as victim

ransomware.liveHigh

Crpxo claims Anadolu Bank in ransomware extortion post

ransomware.liveHigh

Crpxo ransomware gang claims Turkish Airlines (THY) as victim

ransomware.liveHigh

Crpxo ransomware gang claims Johnson & Johnson victim

ransomware.liveHigh

Crpxo publishes DOĞAN HOLDİNG as ransomware victim

ransomware.liveHigh

Crpxo ransomware gang publishes Anadolu Sigorta as victim

ransomware.liveHigh

Crpxo ransomware gang publishes Hyundai as victim

ransomware.liveHigh

Crpxo ransomware gang publishes ASELSAN as victim

ransomware.liveHigh

Crpxo ransomware gang publishes A101 as victim

ransomware.liveHigh

Crpxo ransomware gang publishes IPTV platform victim

ransomware.liveHigh

Crpxo ransomware gang publishes Marketech as new victim

ransomware.liveHigh

Crpxo ransomware gang claims American Hospice & Home Health Services (Ahhh Care) victim

ransomware.liveHigh

Crpxo ransomware gang claims Bright Star Partners Insurance victim

ransomware.liveHigh

Crpxo ransomware gang claims eCare Platform victim

ransomware.liveMedium

Crpxo ransomware gang publishes Dignity Phoenix as victim

ransomware.liveHigh

Crpxo ransomware gang publishes Schorr Law as victim

ransomware.liveHigh

Crpxo ransomware claims Simpkins Law Firm victim with 31.2 GB data leaked

ransomware.liveHigh

Crpxo ransomware gang publishes Leah Walker Orthodontics as victim

ransomware.liveHigh

Crpxo ransomware publishes Elko Dental Specialists as victim

ransomware.liveHigh

Crpxo ransomware gang publishes ProSmile Family Dental Care as victim

ransomware.liveHigh

Crpxo ransomware gang claims Qube Aviation Catering as victim

ransomware.liveMedium

Crpxo ransomware gang claims new victim: Performance Data Solutions

ransomware.liveHigh

Crpxo ransomware gang claims Host & Protect (RedBlink) victim

ransomware.liveMedium

Crpxo ransomware gang claims new victim: RnnR Cloud

ransomware.liveHigh

Crpxo claims CodeConductor.ai breach with 52.4 GB data leak

ransomware.liveMedium

Crpxo ransomware gang publishes Prei Capital as new victim

ransomware.liveHigh

Crpxo publishes FLP Law Group LLP as ransomware victim

ransomware.liveHigh

Crpxo ransomware gang publishes Summit Hill Insurance as victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans