Ransomware group

Helldown ransomware: victims and leak site activity

The Helldown ransomware group has listed 36 victims on its leak site since August 2024; its latest post is from 6 November 2024. Most affected countries: United States, Germany and Italy. Most targeted sector: Professional Services.

Total posts 36
First seen 2024-08-13
Latest post 2024-11-06
Countries hit 17

About Helldown

Helldown is an aggressive ransomware group first documented in August 2024, known for exploiting Zyxel firewall vulnerabilities to gain initial access and conducting large-scale data exfiltration averaging 70 GB per victim, targeting IT services, telecommunications, manufacturing, and healthcare primarily in the US.

Leak site (Tor)
http://onyxcgfg4pjevvp5h34zvhaj45kbft3dg5r33j5vu3nyp7xic3vrzvad.onion

Most targeted countries

  1. United States 9
  2. Germany 4
  3. Italy 3
  4. Switzerland 2
  5. France 2
  6. United Kingdom 2
  7. Lebanon 2
  8. Poland 2
  9. Austria 1
  10. Brazil 1
All countries →

Most targeted sectors

  1. Professional Services 9
  2. Healthcare 6
  3. Manufacturing 6
  4. Technology 5
  5. Energy & Utilities 3
  6. Retail & E-Commerce 3
  7. Transportation 2
  8. Financial Services 1
  9. Government & Defense 1
All sectors →

Helldown victims per year

36 2024

All 36 victims

Search every post in the full table.
Victim Country Sector Discovered
klinkamkurpark Germany Healthcare
hausdesstiftens.org Germany Healthcare
nightnurse.ch Switzerland Healthcare
fuelco — Energy & Utilities
VALLEYFIRM Hong Kong Professional Services
children India Retail & E-Commerce
knoxlawcenter United States Professional Services
AMERICANVENTURE United States Professional Services
CSIKBS Japan Retail & E-Commerce
SANJACINTOCOUNY United States Government & Defense
compassfs United States Financial Services
lacliniqueducoureur Canada Healthcare
TIVOLI-33 France Healthcare
qualiform.cz Czechia Manufacturing
SMARTS-ENGINEER Russia Technology
HBGJEWISHCOMMUN United States Retail & E-Commerce
barryavenueplating United States Manufacturing
cincinnatipainphysicians United States Healthcare
kbosecurity.co.uk United Kingdom Professional Services
khonaysser.com Lebanon Energy & Utilities
BARRYAVEPLATING United States Manufacturing
RSK-IMMOBILIEN Germany Professional Services
ATP Italy Professional Services
Khonaysser Lebanon Energy & Utilities
kbo United Kingdom Technology
zyxel Netherlands Technology
hugwi Switzerland Technology
SCHLATTNER Germany Manufacturing
deganis France Professional Services
XPERT Business Solutions GmbH Austria Professional Services
MyFreightWorld United States Transportation
cbmm Brazil Manufacturing
AZIENDA TRASPORTI PUBBLICI S.P.A. Italy Transportation
briju Poland Professional Services
vindix Poland Technology
Albatros Italy Manufacturing