Threat Group Profile
ransomexx
● Active — last 30 days
Victim claims
3
First seen
Apr 2026
Last activity
20 Jun 2026
Tracked since
—
Group overview
RansomExx is a ransomware family that targeted multiple companies starting in mid-2020. It shares commonalities with Defray777.
Preferred targets
Business Services · 2
Hospitality and Tourism · 1
Most targeted countries
JP · 2
VN · 1
