Threat Group Profile
orca
Dormant / historical
Victim claims
1
First seen
Apr 2026
Last activity
27 Apr 2026
Tracked since
Sep 2024
Group overview
Orca is a ransomware group that emerged in September 2024, identified as a variant of the Zeppelin malware family, targeting organizations in manufacturing and logistics across Taiwan, Tunisia, Austria, and France, claiming to avoid hospitals, government institutions, and non-profits.
Preferred targets
Agriculture and Food Production · 1
Most targeted countries
IT · 1