Devman2
Compare
Parsing: enabled
Known RaaS
Description
DevMan 2.0 is the evolved iteration of the DevMan ransomware, first documented in July 2025. It enhances the capabilities of its predecessor with robust double-extortion tactics and operates under a Ransomware-as-a-Service (RaaS) model, offering structured leak and extortion infrastructure. Affiliates and operators are using it across diverse sectors—such as manufacturing, retail, and electronics—targeting organizations in Japan, Germany, and other countries. Demands from initial campaigns range widely, spanning from around $1 million to over $10 million USD.
Ransom notes1
Tox1
| Tox |
|---|
| 9D97F166730F865F793E2EA07B173C742A6302879DE1B0BBB03817A5A04B572FBD82F984981D |
Urls3
Activity (interactive) 193
Posts193
| Date | Title | Description | Screen |
|---|---|---|---|
| klhindustries.com | |||
| paragonradiology.com | |||
| heitech.com.my | |||
| pronaca.com | Financial, contracts HR data | ||
| consigaz.com.br | |||
| sealbeachca.gov | Datatheft 300gb of data stollen includes gov documents, deeds and much more | ||
| sealbeachpd.com | data theft, evidence, officers personal information police reports, DEA open cases information | ||
| ******m*di*al.com | Patients data, plastic operations data, SSNs | ||
| ****t*lc*a*tpm.com | Financial, patients data, HR data | ||
| s***p.com | Case data, atourney client data, hr data | ||
| Intonu.com | Financial, Hr documents, claims | ||
| oppor**nity*****.org | Patients data, financial data | ||
| Jennings SD | Financial data, HR data | ||
| sharinc.org | Financial, Custommer data | ||
| kavi.fi | HR data | ||
| i**o**.us | Financial, Hr documents, claims | ||
| ***ind***es.com | Hr data, client data | ||
| Clínica Dávila | Patients' full records, HIV test results, IDs. Throughout a long waiting period, and despite a vast number of phone calls and emails sent by our team to the hospital, we have seen no action from the clinic to resolve the issue - knowing that the HIV tests could potentially change the lives of people whose relatives, friends, and workplaces will... | ||
| k*v*.fi | HR data | ||
| transrocamar.com | Financial, Client IDS | ||
| British Holiday & Home Parks Association Ltd | Passport scans, Financial | ||
| consult*****.c** | Financial, HR data | ||
| *n**e-ai | SRC, Client data | ||
| ****s*oc****.com | Financial, Client IDS | ||
| Culinary Jet Concierge | |||
| beausejourco-op.crs | Financial, HR | ||
| d*v***.cl | Patients full records, HIV tests results, ID's | ||
| Axion50plus | Financial, HR data, Client data | ||
| Jet ******** | |||
| Productos Lácteos Flor de Aragua CA | HR data, clients data, Financial data | ||
| a**o*50*****.org | Financial, HR data, Client data | ||
| b**u**jou***-**.crs | Financial, HR | ||
| DXS SYSTEMS | |||
| CANCER | Financial data, clients data | ||
| ***-***tems.*** | |||
| Quezon Power | Employee data, hr info, projects, Work logs of the power plants, Scada SRC | ||
| Hopital La Rabta | |||
| C*NC*R | Financial data, clients data | ||
| www.digital****.com | Data theft 80gb | ||
| Hopital ** ***** | |||
| Village Santé Saint Joseph Hospital | patient data | ||
| fassic.org | Financial Records, Med cards, Hr documents | ||
| Inter care | Full quickbooks dump, patients data, and financial data | ||
| TAWASOL | Custommer data | ||
| pestbusters | |||
| GMA NETWORK | |||
| DAILY NEWS THAILAND | |||
| piriou | |||
| netstar | |||
| gotec | |||
| elematec | |||
| solidere | |||
| diethelmtravel | |||
| braswellsvc | |||
| busaba | |||
| r3consulting | |||
| wrapex | |||
| profimetrics.com | |||
| hameshakem.co.il | Financial, Custommer data | ||
| naturmaelk | |||
| chicagobotanic | |||
| pharmaciedesalize.com.fr | |||
| oucru.org | |||
| omniumint | Projects, and proof of corruption | ||
| MCC | |||
| hopital-*********.com | Financial data, medical records | ||
| f***i*.o*g | Financial Records, Med cards, Hr documents | ||
| arko.no | Datatheft Client DB | ||
| S**** Saint ****** | Financial data, medical cards | ||
| cpasch.com | |||
| n*w*****.com | |||
| ravand.com | |||
| Abdulhadi Hospital | |||
| newhorizonsmedical.org | |||
| www.eastersealsnei.org | |||
| m*tt**ca**r**.**.it | |||
| c*a*c*.c*m | |||
| a*f*o.us | |||
| gsccca.org | |||
| procure.com | |||
| mcchemical.com | |||
| future.com.bo | |||
| f*t*r*.com.** | |||
| ****clinic.com.** | |||
| ctfc.cat | |||
| omniumint.com | |||
| IT IS NOW FORBIDDEN TO LOCK THESE COUNTRIES: Mali Central African Republic Burkina Faso Ni | |||
| www.oucru.org | |||
| www.heitech.com.my | |||
| m*c*e*ic*l.com | |||
| o*c*u.o** | |||
| juntalocal.cdmx.gob.mx | |||
| News for recovery companies | |||
| fhw.org | |||
| h*i**c*.c*m.my | |||
| r*p**fl*wa*ps.com | |||
| g*e*g*o**l.com | |||
| h*tel*ys*e*s.pl | |||
| pharmaciedesalizes.fr | |||
| www.o****m*nt.com | |||
| MAKE CIS SAFE AGAIN | |||
| EMBASY OF BOLIVIA DC | |||
| regionalurology.com | |||
| ****** embassy D.C | |||
| wrapex.ca | |||
| r******urology.com | |||
| forestry.gov.jm | |||
| pure-chemical.com | |||
| braswellsvc.com | |||
| shimaogroup.com | |||
| naturmaelk.dk | |||
| www.hameshakem.co.il | |||
| teeuwissen.com | |||
| t*t*a**o**.com | |||
| a**h*y*in*er**t**nal.c*m | |||
| www.profimetrics.com | |||
| e***.o*g | |||
| Talants wanted | |||
| We once again need reaserchers to document | |||
| China Harbour Engeneiring Company | |||
| pestbusters.com.sg | |||
| NSSF KENYA | |||
| www.braswellsvc.com | |||
| busaba.com | |||
| www.chicagobotanic.org | |||
| r3consulting.com | |||
| ncgllc.com | |||
| n**u***e**.dk | |||
| sacada.org | |||
| www.wrapex.ca | |||
| promisedland.com.tw/h2> 1 million USD... Time Remaining: --- BUY Files | 1 million USD... | ||
| www.shimaogroup.com | 91 million USD... | ||
| www.p***e*u**h***.us | 1.7 million USD... | ||
| www.s*i***gr*u*.com | 91 million USD... | ||
| promisedland.com.tw | 1 million USD... | ||
| www.pure-chemical.com | 5 million USD... | ||
| ruff.com.br | 1 million USD...220GB exfiled | ||
| www.diethelmtravel.com | 1.8 million USD...175GB exfiled | ||
| kw****.tw | 1 million USD...200GB exfiled | ||
| pr*****.tw | 1.05 million USD...960GB exfiled | ||
| b*u*l*****.tw | 1.1 million USD...340GB exfiled | ||
| ***.c*m.tw | 6 million USD...340GB exfiled | ||
| pt.elis.com | 4 million USD...450GB exfiled | ||
| pt.e*i*.com | 4 million USD...450GB exfiled | ||
| mol.go.th | 15 million USD...300GB exfiled | ||
| eehc.gov.eg | 2.27 million USD...58GB exfiled | ||
| solidere.com | 7.25 million USD...400GB exfiled | ||
| www.e***.gov.eg | 2.27 million USD...58GB exfiled | ||
| sol*d*r*.com | 7.25 million USD...400GB exfiled | ||
| gotec.com | 6.45 million USD... | ||
| elematec.com | 10 million USD(only data exfiled)... | ||
| c****gl*b*.com | 1 million USD... | ||
| takachiho.co.jp | 1 million USD(only data exfiled)... | ||
| NSSF KENYA Time Out | /nssf.zip - first sample /nssfwriteup.html - writeup 4.5 million USD... | ||
| DHL THAILAND | |||
| lantro.com | 1.1 million USD... | ||
| dmbarone.com | |||
| Gobierno del Estado de Colima | |||
| www.nijar.es | |||
| netstar.co.za | 1.2 million USD... | ||
| www.paragonradiology.com | 200k USD... | ||
| TBD HONG KONG | |||
| TBD KOREA | |||
| TOHO-CO | |||
| TBD GREECE | |||
| piriou.vn | 383K USD... | ||
| TBD KENYA | |||
| Pienaar Brothers | 590K USD... | ||
| tvgoiania.com.br | 80K USD... | ||
| dailynews.co.th | 375K USD... | ||
| Victim from Japan | |||
| https://pestbusters.com.sg/ | 100K USD... | ||
| gmanetwork.com | |||
| Chinese Healthcare Organisation | |||
| smvthailand.com | 375K USD... | ||
| South African IT firm | |||
| Singapour Factory | |||
| dovesit.co.za | 550k USD... | ||
| South African Hr company | |||
| China Harbour Engineering Company | 450k USD... | ||
| Feel Four | 60k USD... | ||
| EU victim | |||
| Premier Meats South Africa | (90k USD)... | ||
| Hong Kong Victim | |||
| Singapour Victim | |||
| Med institute | |||
| FEELFOUR | 70k USD... | ||
| Bangkok Electronics Co., Ltd | |||
| Tawasol | |||
| Dubai Company | |||
| Texas Construction Firm | |||
| Optimax Technology | |||
| doumen.fr |