Ransomware group

Apos ransomware: victims and leak site activity

The Apos ransomware group has listed 16 victims on its leak site since April 2024; its latest post is from 15 August 2025. Most affected countries: Brazil, United States and Argentina. Most targeted sector: Technology.

Total posts 16
First seen 2024-04-29
Latest post 2025-08-15
Countries hit 9

About Apos

Apos is a data-broker extortion group that surfaced in April 2024, focusing on data exfiltration and threatening to publish or sell stolen information rather than encrypting files, targeting technology, healthcare, manufacturing, telecom, and government sectors across multiple countries.

Leak site (Tor)
http://yrz6bayqwhleymbeviter7ejccxm64sv2ppgqgderzgdhutozcbbhpqd.onion

Apos victims per year

5 2024
11 2025

All 16 victims

Search every post in the full table.
Victim Country Sector Discovered
ACMARK Professional Services
RH United Kingdom Retail & E-Commerce
wow pictures Australia Retail & E-Commerce
Ha******.us Healthcare
infraestructures.cat Spain Energy & Utilities
Lawton Partners Canada Financial Services
KIU System Solutions Argentina Technology
Netcom-World United States Technology
InternetWay Brazil Technology
M-1 TOOLWORKS United States Manufacturing
Auxis United States Professional Services
Drogarias Preço Bom Brazil Healthcare
Drogaria Preco Bom Brazil Professional Services
Sunlux Group France Manufacturing
Algen Healthcare India Healthcare
Bitz Softwares Brazil Technology