Signalis
sign in--:--:--UTC
Threat actors

Vexy

☆ pin
Reports
24
First seen
Sep 3, 2026
Last seen
Oct 17, 2026
Motivation
Financial

Targeting

Sectors
Retail & E-commerce ×7Technology ×5Manufacturing ×3Energy & Utilities ×1Education ×1Financial Services ×1Telecommunications ×1Professional Services ×1
Victim regions
×1
×4
India×4
Brazil×2
Ecuador×2
France×2
Argentina×1
Vietnam×1
United States×1
Japan×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×51ip_v4 ×25hash_md5 ×4hash_sha256 ×1hash_sha1 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Vexy ransomware claims Japanese AI policy-intelligence firm polisee Inc.

ransomware.liveHigh

Vexy ransomware publishes Data-Core Systems as victim

ransomware.liveHigh

Vexy ransomware claims Enchanted Fine Jewellery as victim

ransomware.liveHigh

Vexy ransomware publishes Enchanted Fine Jewellery as victim

ransomware.liveHigh

Vexy ransomware claims Guarufilme victim

ransomware.liveHigh

Vexy ransomware claims Kookabarra Juice as victim

ransomware.liveHigh

Vexy ransomware publishes Summit Electric Supply as victim

ransomware.liveHigh

Vexy ransomware claims Groupe Proxitel as new victim

ransomware.liveHigh

Vexy ransomware claims new victim: Majani Insurance Brokers

ransomware.liveHigh

Vexy ransomware claims Quy Nhon University victim

ransomware.liveHigh

Vexy ransomware claims STP Fashion Lab victim

ransomware.liveHigh

Vexy ransomware claims Strad Solutions victim

ransomware.liveHigh

Vexy ransomware claims new victim: i2k2 Networks

ransomware.liveHigh

Vexy ransomware claims new victim: Logar Network Solutions (Brazilian MSP)

ransomware.liveHigh

Vexy ransomware publishes United Group as victim

ransomware.liveHigh

Vexy ransomware claims Librería Santa Fe (Buenos Aires bookstore) as victim

ransomware.liveMedium

Vexy ransomware claims victim: Sancity

ransomware.liveHigh

Vexy ransomware claims McDonald's Ecuador breach

ransomware.liveHigh

Vexy ransomware claims Mega Velocity as new victim

ransomware.liveHigh

Vexy ransomware claims Palsana Enviro (PEPL) as victim

ransomware.liveHigh

Vexy ransomware publishes Annapurna Fashion as victim

ransomware.liveMedium

Vexy ransomware claims victim: Sancity Soft Touch

ransomware.liveHigh

Vexy ransomware claims McDonald's Ecuador as new victim

ransomware.liveHigh

Vexy ransomware publishes Engefitas as victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans