Skip to main content
Ransomware Group

Arkana

Arkana is a ransomware group that emerged in early 2025 and gained attention by claiming an attack on U.S. broadband provider WideOpenWest (WOW!), operating a three-phase ransom/sale/leak extortion model primarily focused on telecom and internet service providers.

Known victims6

Threat level

LOW

Get an alert if one of your domains is named on a ransomware leak site.

Monitor your domainsFree account · up to 5 monitored targets

Known infrastructure

The following Tor hidden services have been associated with this group:

  • Arkana Security
  • Arkana Security

These sites are malicious. Open them only from an isolated environment.

0

Check if you’re affected

Look up your domain to see whether it appears on Arkana’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request