Ransomware group
Apt73 ransomware: victims and leak site activity
The Apt73 ransomware group has listed 157 victims on its leak site since April 2024; its latest post is from 24 July 2026. Most affected countries: United States, United Kingdom and Brazil. Most targeted sector: Professional Services.
Total posts
157
First seen
2024-04-22
Latest post
2026-07-24
Countries hit
50
About Apt73
A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field. According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit. Source: https://github.com/crocodyli/ThreatActors-TTPs
- Also known as
- bashe
- Leak site (Tor)
- http://basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
Most targeted countries
- United States 20
- United Kingdom 19
- Brazil 9
- France 7
- India 7
- Austria 6
- Germany 6
- Switzerland 5
- Indonesia 5
- Morocco 4
Most targeted sectors
- Professional Services 32
- Technology 28
- Financial Services 19
- Government & Defense 17
- Healthcare 13
- Manufacturing 10
- Transportation 8
- Agriculture and Food Production 7
- Energy & Utilities 7
- Retail & E-Commerce 6