Ransomware group

AuditTeam ransomware: victims and leak site activity

The AuditTeam ransomware group has listed 28 victims on its leak site since April 2026; its latest post is from 9 September 2026. Most affected countries: Russia, South Korea and Colombia. Most targeted sector: Technology.

Total posts 28
First seen 2026-04-08
Latest post 2026-09-09
Countries hit 12

About AuditTeam

AuditTeam is a small ransomware group with approximately 5 known victims, primarily targeting organizations in East and Southeast Asia across technology and manufacturing sectors, operating a data leak site consistent with double-extortion methodology.

Leak site (Tor)
http://6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion

AuditTeam victims per year

28 2026

All 28 victims

Search every post in the full table.
Victim Country Sector Discovered
mo***al Germany
dg***kr South Korea
go***et South Korea Technology
kr***rg Argentina
bu***en Russia
Wi***IT Ukraine Technology
pa***op Russia
mansurovogroup Russia Other
PIT.local Colombia
PI***al Colombia Financial Services
Demidov Steel Group Russia Manufacturing
ma***up Russia
De***up Russia
I-SYS Russia Technology
I-***YS Russia
Paid Victim 111CEAA5AD9DA2F1 Russia
ca***lm Russia
Paid Victim B35411691DDC2265 Russia
On***de Russia
Mopas Online Supermarket Turkey Retail & E-Commerce
Trésor Public Senegal Government & Defense
Mo***et
Tr***ic Senegal Transportation
Kawasaki Motors Philippines Corporation Philippines Manufacturing
joycity South Korea Technology
Paid Victim CCD233FEE92FFA2D Hong Kong
Paid Victim A98A624456DA525F Thailand
Paid Victim D3C1388C1B73BCA2 China