Ransomware Group intelligence

Yurei

Inactive

Track Yurei with 3 published victims and 1 known leak locations in a single intelligence view.

Victims 3 Known published victims in this dataset
First discovered 2025-09-05 Earliest victim discovery date
Last discovered 2025-09-09 Latest victim discovery date
Inactive since 228 days Days since the latest known victim
Top country Sri Lanka 1 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Yurei is tracked by Breach House as a ransomware group with 3 published victims.

Sri Lanka is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (3)

    Search, filter and paginate the victim timeline for Yurei.

    Type Target Discovered Country Business Category Intel Link
    Ransomware noblecorp.net id22193 View details Switzerland Manufacturing / Engineering
    Ransomware www.thepromisenig.com id22181 View details Nigeria Communication / Marketing
    Ransomware www.midcity.lk id22151 View details Sri Lanka Public Sector