Ransomware Group intelligence

Cipherforce

Active

Track Cipherforce with 6 published victims and 1 known leak locations in a single intelligence view.

Victims 6 Known published victims in this dataset
First discovered 2026-02-23 Earliest victim discovery date
Last discovered 2026-02-23 Latest victim discovery date
Inactive since 60 days Days since the latest known victim
Top country United States 2 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Cipherforce is tracked by Breach House as a ransomware group with 6 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown o3ydbkayttkyg4iw2nc732jxmmex25bjeyqyvuuyngnxmpehdefjr3qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (6)

    Search, filter and paginate the victim timeline for Cipherforce.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Accuick id26764 View details United States Other
    Ransomware Zip24 - ShipOx id26758 View details United Arab Emirates Transportation / Travel / Logistics
    Ransomware FindNear id26757 View details Viet Nam Services
    Ransomware tektreeinc.com id26756 View details India Services
    Ransomware hiringsteps.com id26755 View details United States Communication / Marketing
    Ransomware Biaodianyun Group Ltd id26754 View details China Services