Ransomware group

AuditTeam ransomware: victims and leak site activity

The AuditTeam ransomware group has listed 59 victims on its leak site since April 2026; its latest post is from 23 October 2026. Most affected countries: Russia, Italy and South Korea. Most targeted sector: Technology.

Total posts 59
First seen 2026-04-08
Latest post 2026-10-23
Countries hit 18

About AuditTeam

AuditTeam is a small ransomware group with approximately 5 known victims, primarily targeting organizations in East and Southeast Asia across technology and manufacturing sectors, operating a data leak site consistent with double-extortion methodology.

Leak site (Tor)
http://6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion
Profile
ransomware.live

AuditTeam victims per year

59 2026

All 59 victims

Search every post in the full table.
Victim Country Sector Discovered
ADL Lift Services Limited United Kingdom Manufacturing
Zena Office Italy Professional Services
Ca***ka Spain —
Admirals Trading United Arab Emirates Financial Services
AD***ed United Kingdom —
Ze***ce Italy —
Sa***ge United Kingdom —
Ad***ng United Arab Emirates Technology
steelco Italy Manufacturing
ProMind IT Italy Technology
Paid Victim 32373FFB7AF7E725 Italy —
vit.ac.in India Education
Pr***IT Italy Professional Services
TEK SPB Russia Technology
st***co Italy —
td***up Italy —
kit-e.jp Japan Technology
Paid Victim 192EB2B6AD7B98D9 Russia —
palletshop Russia Retail & E-Commerce
Wise IT Ukraine Technology
buben Italy Other
dg.ac.kr South Korea Education
gownet.net South Korea Other
krimax.org Argentina Other
Ne***ox Russia Technology
Paid Victim F9CF4B639CAC1B18 Russia —
Paid Victim FDC699DE3A112669 Germany —
vi***in India Transportation
TE***PB Russia —
ki***jp Japan —
my***ru Russia Technology
mo***al Germany —
dg***kr South Korea —
go***et South Korea Technology
kr***rg Argentina —
bu***en Russia —
Wi***IT Ukraine Technology
pa***op Russia —
mansurovogroup Russia Other
PIT.local Colombia —
PI***al Colombia Financial Services
Demidov Steel Group Russia Manufacturing
ma***up Russia —
De***up Russia —
I-SYS Russia Technology
I-***YS Russia —
Paid Victim 111CEAA5AD9DA2F1 Russia —
ca***lm Russia —
Paid Victim B35411691DDC2265 Russia —
On***de Russia —
Mopas Online Supermarket Turkey Retail & E-Commerce
Trésor Public Senegal Government & Defense
Mo***et — —
Tr***ic Senegal Transportation
Kawasaki Motors Philippines Corporation Philippines Manufacturing
joycity South Korea Technology
Paid Victim CCD233FEE92FFA2D Hong Kong —
Paid Victim A98A624456DA525F Thailand —
Paid Victim D3C1388C1B73BCA2 China —