Skip to main content
Ransomware Group

0mega

0mega is a double-extortion ransomware group that emerged in May 2022, targeting businesses across multiple sectors worldwide by encrypting files and threatening to leak stolen data; it also pivoted to cloud-based extortion by compromising Microsoft 365 admin accounts.

Known victims7

Threat level

LOW

Get an alert if one of your domains is named on a ransomware leak site.

Monitor your domainsFree account · up to 5 monitored targets

Known infrastructure

The following Tor hidden services have been associated with this group:

  • 0mega.cc
  • 0mega | Blog

These sites are malicious. Open them only from an isolated environment.

0

Check if you’re affected

Look up your domain to see whether it appears on 0mega’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request