RansomLook logo RansomLook

Fog

Compare
fog logo fog logo
Parsing: enabled
→

View crypto

Description

Fog is a sophisticated ransomware strain first observed in April–May 2024, initially targeting U.S. educational institutions before expanding into sectors such as government, business services, finance, and manufacturing. The group conducts fast, double-extortion attacks: they exploit compromised VPN credentials or known vulnerabilities, deploy encryption (notably using extensions like .fog, .FLOCKED), and exfiltrate data prior to encryption to maximize victim pressure. Fog is associated with other prolific actors—such as Akira and Conti—through shared tooling, infrastructure timelines, and even cryptocurrency wallets.

External Analysis8
External Analysis
https://www.kroll.com/en/publications/cyber/fog-ransomware-targets-higher-education
https://www.broadcom.com/support/security-center/protection-bulletin/fog-ransomware
https://www.sentinelone.com/anthology/fog/
https://blog.barracuda.com/2025/04/29/a-closer-look-at-fog-ransomware
https://www.trendmicro.com/en_us/research/25/d/fog-ransomware-concealed-within-binary-loaders-linking-themselve.html
https://www.securitymagazine.com/articles/101694-fog-ransomware-group-uses-unconventional-toolset-new-research-finds
https://www.areteir.com/static/FOG_Ransomware.pdf
https://assets.kpmg.com/content/dam/kpmgsites/in/pdf/2024/11/kpmg-ctip-fog-ransomware-19-nov-2024.pdf.coredownload.inline.pdf
Ransom notes2
Urls2
Url
Status
Screen
Uptime 30d
Health
http://xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion Down Screen
—
http://xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion/posts Down Screen
—
File servers3
Url
Status
Screen
Uptime 30d
Health
http://hlbqbuy2bo3onn6h6eq7pbci24kughiaw4rkxrewidnqma3hwwgt2ead.onion Down Screen
—
http://44dz7r5uduhihaks7m62vztthp5s7thokbgeida7usm4rvakriuvk3yd.onion/ Down Screen
0%
http://nw5zrjqarckmsf22rrgo5yooelpnn5raxhesuhrpzceqibmjwanbbaad.onion/ Down Screen
0%
Chat servers1
Url
Status
Screen
Uptime 30d
Health
https://xql562evsy7njcsngacphc2erzjfecwotdkobn3m4uxu2gtqh26newid.onion/ Down Screen
0%
Activity (interactive) 134
Activity charts
Posts134
Date Title Description Screen
Newtown Friends School (newtownfriends.org)
RAE (Real Academia Española) (rae.es) <1 GB Screen
University Diagnostic Medical Imaging, PC (udmi.net) 28.1 GB Screen
El Camino Real Academy (elcaminorealacademy) 111 GB Screen
Wilkinson Rogers (wilkinsonrogers.com) 57 GB Screen
Magnolia Manor (magnoliamanor.com) 54.6 GB Screen
Oberlin Cable Co-op (oberlin.net) 33 GB Screen
WJCC Public Schools (wjccschools.org) 27.7 GB Screen
The 19 biggest gitlabs Screen
SCOLARO FETTER GRIZANTI & McGOUGH, P.C. (scolaro.com) 92.5 GB Screen
Grupo Baston Aerossol (baston.com.br) 88.3 GB Screen
Pampili (pampili.com.br) 36.3 GB Screen
Central McGowan (centralmcgowan.com) 23.5 GB Screen
Klesk Metal Stamping Co (kleskmetalstamping.com) 2.2 GB Screen
Gitlabs: Synelixis Solutions, INGV, VMO Holdings Screen
Gitlabs: Naphix, WDNA, Bayteq Screen
Haggin Oaks Golf (hagginoaks.com) 29,2 GB Screen
Gitlabs: Next TI, VISEO, Hochschule Trier Screen
Greencastle-Antrim Senior High School (gcasd.org) 7.6 GB Screen
Gitlabs: Acqua development, QBurst, Pamyra.de Screen
Gitlabs: Omydoo, Ayomi, ADULLACT Screen
Mozo Grau (mozo-grau.com) 72.2 Screen
The University of Notre Dame Australia (nd.edu.au) 62 GB Screen
Aurora Public Schools (aurorak12.org) 171 GB Screen
Saint George's College (saintgeorge.cl) 5 GB Screen
Hess (hess-gmbh.de) 6.5 GB Screen
Gitlabs: INGV, Spacemanic, Squeezer-software Screen
Gitlabs: Universitatea Politehnica din Bucuresti, Maxvy Technologies Pvt, iRidge Inc. Screen
Gitlabs: Chalmers tekniska högskola, Fligno, 3SS Screen
Gitlabs: eConceptions, Top Systems, DIEM Screen
Gitlabs: hemio.de, SOLEIL, Devlion Screen
Gitlabs: Bolin Centre for Climate Research, X-lab group, Madia Screen
Karadeniz Holding (karadenizholding.com) 1.5 TB Screen
Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Cof
Gitlabs: Professional Computer, X-Pans, Propulsion Academy AG Screen
Gitlabs: Prasaga, HE2B, Kombinat Screen
Boutin Jones (boutindentino.com) 180 GB Screen
ELTEK Group (eltekgroup.com) 13 GB Screen
De La Salle High School (dlshs.org) 20 GB Screen
Kooijman Vianen (kooijmanvianen.nl) 25.7 GB Screen
SciTech Services, Inc. 15 GB Screen
Buttery (butterycompany.com) 1.7 GB Screen
The University of Oklahoma (ou.edu) 91 MB Screen
OmniRide (omniride.com) 7.2 GB Screen
Saint-Bar (saintbar.be) 16.8 GB Screen
Ober Mountain (OberGatlinburg.com) 14.3 GB Screen
Aroma Housewares Co (Aromaco.com) 35 GB Screen
RODS Surveying (rods.cc) 43.5 GB Screen
Forum Architecture & Interior Design (forumarchitecture.com) 5.7 GB Screen
Gallade Chemical (galladechem.com) 2.4 GB Screen
Industria e Comercio Jolitex Ltda (jolitex.com) 23 GB Screen
Village Community School (vcsnyc.org) 1 GB Screen
Circle Electric (circleelectric.com) 25.9 GB Screen
EP Holdings (epholdingsinc.com) 2.7 GB Screen
Schenkelberg - Die Medienstrategen (schenkelberg-druck.de) 6.8 GB Screen
Howell Township Public Schools (howell.k12.nj.us) 14.2 GB Screen
Energy Capital Credit Union (eccu.net) Screen
Jet Edge (jetedgewaterjets.com) 5 GB Screen
Reliance Connects (relianceconnects.com) 19 GB Screen
Vroninks Ricker Weyts & Sacre- Notaires (notassoc.be) 15 GB Screen
SpeedLine Solutions (speedlinesolutions.com) 6 GB Screen
Ouro Verde (ouroverde.net.br) 4 GB Screen
Waverley Christian College (wcc.vic.edu.au) 5 GB Screen
Cognity (cognity.gr) 36 GB Screen
Planters Telephone Cooperative (planters.net) about 1 GB Screen
Dorner (dorner-gmbh.de) 1 GB Screen
Conlin's Pharmacy (conlinspharmacy.com) 10 GB Screen
Weld Racing (weldracing.com) 10,1 GB Screen
Chanas Assurances S.A. (chanasassurances.com) 6 GB Screen
ALLTUB Group (alltub.com) 20 GB Screen
Bedminster School (bedminsterschool.org) Screen
WPM Pathology Laboratory (wpmpath.com) 3 GB Screen
Gruber Tool & Die (grubertool.com) 8,2 GB Screen
Signal Health Washington (signalhealthwa.com) 1 GB Screen
Complete Recycling Services (completerecyclingservices.com) 1,4 GB Screen
Pinnacle Plastic Products (pinnacleplasitcporducts.com) 5,3 GB Screen
Pioneer Urban Land & Infrastructure (pioneerurban.in) 10 GB Screen
Marketing Incentives (leinsterappointments.ie) about 1 GB Screen
Metroline (metrolinedirect.com) 1,3 GB Screen
Fifteenfortyseven Critical Systems Realty (1547realty.com) 6 GB Screen
Hogan Mfg (hoganmfg.com) 10,5 GB Screen
Burkburnett Independent School District 1 GB Screen
Valley Planing Mill (valleyplaning.com) 5,6 GB Screen
Waters Truck and Tractor (waterstruck.com) 3 GB Screen
Vector Transport (vectortransport.com) 19 GB Screen
Cape Cod Regional Technical High School (capetech.us) 6 GB Screen
GSR Andrade Architects (gsr-andrade.com) 65 GB Screen
Askling Car (asklingbil.se) 2,6 GB Screen
Jillamy (jillamy.com) 28 GB Screen
SmartSource (smartsource-inc.com) 81 GB Screen
Jordan Public Schools (https://www.jordan.k12.mn.us/) 11 GB Screen
Sage Automotive Interior (sageautomotiveinteriors.com) 76 GB Screen
Evergreen SD50 (evergreensd50.com) 5,1 GB Screen
Evergreen Public Schools (evergreenps.org) 5,1 GB Screen
Evergreen Local School District (evgvikings.org) 5,1 GB Screen
Cucamonga Valley Water District (cvwdwater.com) 41 GB Screen
Value City NJ (valuecitynj.com) 25 GB Screen
The Getz Group (getz.com.hk) 45 GB Screen
Apache Mills, Inc. (apachemills.com) 27 GB Screen
Goshen Central School District (gcsny.org) 10 GB Screen
Mar-Bal (mar-bal.com) 37 GB Screen
Lincoln University (lincolnu.edu) 10 GB Screen
Clear Connection (clearconnection.com) 71 GB Screen
Trimarc Financial (trimarc.com) 3 GB Screen
Philadelphia Macaroni (philamacaroni.com) 102 GB Screen
Schweiger Transport (schweiger-gmbh.de) 118 GB Screen
Fromm (FrommBeauty.com) 16 GB Screen
Ultra Tune (ultratune.com.au) 3 GB Screen
Welker (welker.com) 27,6 GB Screen
Cordogan Clark and Associates (cordoganclark.com) 107 GB Screen
Food Sciences Corporation (foodsciences.com) 86 GB Screen
Central Pennsylvania Food Bank 20 GB Screen
Juice Generation 10 GB Screen
Sunrise Farms 30 GB Screen
Prentke Romich Company 250 GB Screen
S. Walter Packaging Screen
Clatronic International GmbH 469 GB Screen
Seaway Manufacturing Corp. Screen
Ziba Design 22 GB Screen
IOI Corporation Berhad 20 GB Screen
Hi-P International 22 GB Screen
unknown 0
BASF | Nunhems 30 GB Screen
City of Cold Lake 10 GB Screen
Odessa College 18 GB Screen
00 0 Screen
Wichita State University Campus of Applied Sciences and Technology 10 GB Screen
Geelong Lutheran College 4GB Screen
Asbury Theological Seminary 10 GB Screen
Djg Projects 19.4GB Screen
Verweij Elektrotechniek 95GB Screen
Alvin Independent School District 60GB Screen
West Allis-West Milwaukee School District 9,5 GB Screen
German University of Technology in Oman 10 GB Screen
Note