Ransomware group
Beast ransomware: victims and leak site activity
The Beast ransomware group has listed 72 victims on its leak site since July 2025; its latest post is from 25 August 2026. Most affected countries: United States, United Kingdom and Brazil. Most targeted sector: Manufacturing.
Total posts
72
First seen
2025-07-29
Latest post
2026-08-25
Countries hit
20
About Beast
Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process starting and stopping, and geographic identification to avoid encryption in CIS countries.
- Also known as
- GIGAKICK
- Leak site (Tor)
- http://beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd.onion
Most targeted countries
- United States 29
- United Kingdom 8
- Brazil 5
- Canada 3
- China 3
- South Korea 3
- Argentina 2
- Australia 2
- Germany 2
- Spain 2
Most targeted sectors
- Manufacturing 16
- Professional Services 16
- Healthcare 13
- Education 6
- Technology 6
- Financial Services 3
- Retail & E-Commerce 3
- Government & Defense 2
- Transportation 2
- Agriculture and Food Production 1