Ransomware group

Madliberator ransomware: victims and leak site activity

The Madliberator ransomware group has listed 16 victims on its leak site since July 2024; its latest post is from 1 October 2024. Most affected countries: Spain, Italy and Belgium. Most targeted sector: Professional Services.

Total posts 16
First seen 2024-07-17
Latest post 2024-10-01
Countries hit 11

About Madliberator

MadLiberator is a ransomware group that emerged in mid-2024, known for erratic behavior including randomized ransom demands and unpredictable encryption patterns, targeting government entities including the Italian Ministry of Culture and using a data leak site to post exfiltrated files.

Leak site (Tor)
http://k67ivvik3dikqi4gy4ua7xa6idijl4si7k5ad5lotbaeirfcsx4sgbid.onion

Most targeted countries

  1. Spain 4
  2. Italy 2
  3. Belgium 1
  4. Brazil 1
  5. Germany 1
  6. United Kingdom 1
  7. South Korea 1
  8. Netherlands 1
  9. United States 1
  10. South Africa 1
All countries →

Most targeted sectors

  1. Professional Services 7
  2. Government & Defense 2
  3. Manufacturing 2
  4. Technology 2
  5. Financial Services 1
  6. Healthcare 1
  7. Transportation 1
All sectors →

Madliberator victims per year

16 2024

All 16 victims

Search every post in the full table.
Victim Country Sector Discovered
marthamedeiros.com.br Brazil Professional Services
ctelift.com Italy Professional Services
ych.com United States Transportation
awsag.com Germany Technology
suandco.com South Korea Professional Services
msprocuradores.es Spain Professional Services
coinbv.nl Netherlands Technology
orbinox.com — Manufacturing
ORBINOX Spain Manufacturing
vrd.be Belgium Professional Services
VITALDENT Spain Healthcare
BENICULTURALI.IT Italy Government & Defense
MONTERO & SEGURA Spain Professional Services
crosswear.co.uk United Kingdom Professional Services
sacities.net South Africa Government & Defense
zb.co.zw Zimbabwe Financial Services