Ransomware group
Beast ransomware: victims and leak site activity
The Beast ransomware group has listed 73 victims on its leak site since July 2025; its latest post is from 10 September 2026. Most affected countries: United States, United Kingdom and Brazil. Most targeted sector: Manufacturing.
Total posts
73
First seen
2025-07-29
Latest post
2026-09-10
Countries hit
20
About Beast
Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process starting and stopping, and geographic identification to avoid encryption in CIS countries.
- Also known as
- GIGAKICK
- Leak site (Tor)
- http://beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd.onion
- Profile
- ransomware.live
Most targeted countries
- United States 29
- United Kingdom 8
- Brazil 5
- Canada 3
- China 3
- South Korea 3
- Argentina 2
- Australia 2
- Germany 2
- Spain 2
Most targeted sectors
- Manufacturing 16
- Professional Services 16
- Healthcare 13
- Technology 7
- Education 6
- Financial Services 3
- Retail & E-Commerce 3
- Government & Defense 2
- Transportation 2
- Agriculture and Food Production 1