Ransomware group

Obscura ransomware: victims and leak site activity

The Obscura ransomware group has listed 33 victims on its leak site since September 2025; its latest post is from 11 January 2026. Most affected countries: United States, Malaysia and Denmark. Most targeted sector: Professional Services.

Total posts 33
First seen 2025-09-05
Latest post 2026-01-11
Countries hit 14

About Obscura

Obscura is a ransomware strain observed in 2025, written in Go and specifically targeting Windows domain controllers via the SYSVOL/NETLOGON share, using Curve25519 + XChaCha20 encryption with double-extortion tactics and a 10-day payment deadline.

Leak site (Tor)
http://obscurad3aphckihv7wptdxvdnl5emma6t3vikcf3c5oiiqndq6y6xad.onion/leaks

Most targeted countries

  1. United States 6
  2. Malaysia 5
  3. Denmark 3
  4. Thailand 3
  5. Egypt 2
  6. Ireland 2
  7. Portugal 2
  8. Canada 1
  9. Germany 1
  10. Greece 1
All countries →

Most targeted sectors

  1. Professional Services 7
  2. Technology 6
  3. Energy & Utilities 4
  4. Healthcare 4
  5. Government & Defense 3
  6. Manufacturing 3
  7. Transportation 3
  8. Hospitality 1
All sectors →

Obscura victims per year

27 2025
6 2026

All 33 victims

Search every post in the full table.
Victim Country Sector Discovered
Revoil Greece Energy & Utilities
CleverPower Denmark Energy & Utilities
Trend Import Export Romania Technology
[Redacted] #1927 Thailand Energy & Utilities
STC Concrete Product Thailand Manufacturing
REDtone Malaysia Technology
cle**rp**er.eu — Energy & Utilities
k*m**w.com — Transportation
ACE Forwarding United States Transportation
Startek Engineering Inc. Taiwan Technology
StanleyCo Malaysia Malaysia Professional Services
New Obscura 2.0! — Government & Defense
New Toyo International Holdings Ltd Singapore Manufacturing
Thompson Dorfman Sweatman Canada Professional Services
Federal Auto Holdings Berhad Malaysia Transportation
Cape Dara Resort Pattaya Thailand Hospitality
relationmedia.dk Denmark Technology
meamargroup.com Egypt Other
plazadental.com United States Healthcare
heavenly-dental.com United States Healthcare
thefixingcompany.com Ireland Professional Services
eastdesign.com.my Malaysia Professional Services
espectral.pt Portugal Technology
michigancityin.gov United States Government & Defense
EAST Design Architect Sdn. Bhd Malaysia Professional Services
Espectral Portugal Technology
RelationMedia A/S Denmark Professional Services
Rulmaksan Makina Turkey Manufacturing
The Fixing Company Ireland Professional Services
HeavenlyDental United States Healthcare
Plazadental United States Healthcare
WZV Warndt Germany Government & Defense
MeamarGroup Egypt Other