THREATNOIR
Subscribe
Back to Feed
RansomwareJun 4, 2026

‼️ MORTAR Ransomware support portal: Dark Web: http://hpo7htcpddfanilknttsymttzfr4usxwjycjpazkle...

MORTAR ransomware support portal identified on dark web with onion domain.

Read at source

Summary

A dark web portal for the MORTAR ransomware operation has been identified and mapped. The portal includes login, admin, client, and upload endpoints, with reconnaissance details including HTTP response codes and error pages. This represents active infrastructure for the ransomware-as-a-service operation.

Indicators of Compromise

  • domain — hpo7htcpddfanilknttsymttzfr4usxwjycjpazkleggnvry5bngszyd.onion
  • malware — MORTAR

Entities

MORTAR (threat_actor)