Ransomware group

Arvinclub ransomware: victims and leak site activity

The Arvinclub ransomware group has listed 22 victims on its leak site since March 2022; its latest post is from 15 October 2023. Most affected countries: Iran, Colombia and United Kingdom. Most targeted sector: Agriculture and Food Production.

Total posts 22
First seen 2022-03-12
Latest post 2023-10-15
Countries hit 3

About Arvinclub

Arvin Club is a threat actor with hacktivist leanings that first appeared in May 2021, primarily publishing stolen data via a TOR site and Telegram rather than deploying file-encrypting ransomware, targeting government, education, and banking sectors globally including Iranian government entities.

Leak site (Tor)
http://arvinc7prj6ln5wpd6yydfqulsyepoc7aowngpznbn3lrap2aib6teid.onion

Arvinclub victims per year

4 2022
18 2023

All 22 victims

Search every post in the full table.
Victim Country Sector Discovered
Islamic Azad University Electronic Campus Iran Education
Jahesh Innovation Colombia Technology
Kimia Tadbir Kiyan Iran Manufacturing
Islamic Azad University of Shiraz Iran Education
Pasouk biological company Iran Agriculture and Food Production
Shirin Travel Agency Hospitality
Aban Tether & OK exchange Financial Services
sti company Colombia Other
Sabalan Azmayesh Iran Healthcare
Parsian Bitumen Agriculture and Food Production
Draje food industrial group Iran Agriculture and Food Production
seaside-kish co
AFTA Isfahan Government & Defense
hamyari Shahrdari golestan Iran Government & Defense
Haraz dairy Agriculture and Food Production
150k sib360 Database Technology
Padena Factory Iran Manufacturing
Bitimen Retail & E-Commerce
Al Bijjar Retail & E-Commerce
AM International Manufacturing
stormous Technology
bedfordshire.police.uk United Kingdom Government & Defense