Ransomware group

Freecivilian ransomware: victims and leak site activity

The Freecivilian ransomware group has listed 14 victims on its leak site since December 2022; its latest post is from 31 December 2022. Most targeted sector: Government & Defense.

Total posts 14
First seen 2022-12-31
Latest post 2022-12-31
Countries hit 0

About Freecivilian

FreeCivilian is a data extortion group with suspected ties to Russian GRU military intelligence, known for targeting Ukrainian government websites — including sites offering surrender guidance to Russian troops — blending cybercrime with apparent state-aligned political objectives.

Leak site (Tor)
http://gcbejm2rcjftouqbxuhimj5oroouqcuxb2my4raxqa7efkz5bd5464id.onion

Most targeted countries

Not enough data.

All countries →

Most targeted sectors

  1. Government & Defense 11
  2. Healthcare 1
  3. Manufacturing 1
  4. Technology 1
All sectors →

Freecivilian victims per year

14 2022

All 14 victims

Search every post in the full table.
Victim Country Sector Discovered
mfa.gov.ua Government & Defense
minagro.gov.ua Government & Defense
mon.gov.ua Government & Defense
kmu.gov.ua Government & Defense
gkh.in.ua Government & Defense
bdr.mvs.gov.ua Government & Defense
kyivcity.com Government & Defense
motorsich.com Manufacturing
mtsbu.ua Technology
health.mia Healthcare
minregion.gov.ua Government & Defense
wanted.mvs.gov.ua Government & Defense
e-driver.hsc.gov.ua Government & Defense
diia.gov.ua Government & Defense