Back to Feed
RansomwareApr 30, 2026

‼️ Aur0ra Ransomware Names Its First Seven Victims http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljov...

Aur0ra ransomware group claims first seven victims across US sectors.

Summary

Aur0ra ransomware has publicly named its first seven victims on a dark web leak site, targeting organizations across insurance, logistics, food/metal manufacturing, and legal services in the United States. The group has established an onion-based leak portal to advertise claimed victims and pressure payment. This marks the initial public operations of the Aur0ra ransomware campaign.

Indicators of Compromise

  • domain — u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion
  • malware — Aur0ra

Entities

Aur0ra (threat_actor)Aur0ra ransomware campaign (campaign)