Threat Group Profile

ransomexx

Dormant / historical

Victim claims 3

First seen Apr 2026

Last activity 20 Jun 2026

Tracked since May 2020

Group overview

RansomExx is a ransomware family that targeted multiple companies starting in mid-2020. It shares commonalities with Defray777.

Preferred targets

Business Services · 2 Hospitality and Tourism · 1

Most targeted countries

JP · 2 VN · 1

Victim Claims Timeline

Back to radar

🇻🇳 Vietnam 20 Jun 2026

Go2Joy (go2joy.vn)

go2joy.vn

We have released the complete database of Go2Joy, Vietnam’s leading platform for hourly and short-stay hotel bookings.

Hospitality and Tourism

🇯🇵 Japan 17 Apr 2026

SOGO Auction

sogocorporation.com

SOGO Auction - 951MB leaked. SOGO Auction is a prominent Japan-based, specialized auctioneer with over 30 years of experience in trading used construction machinery and h...

Business Services

🇯🇵 Japan 17 Apr 2026

GoTip

gotip.jp

GoTip - 1.13GB leaked. Gotip.jp is a Japanese live-streaming enhancement tool that connects digital tips (donations) to physical Bluetooth-enabled devices. It allows view...