Ransomware Group
Climax inc
Known victims17Distinct claims on its leak site, one per victim and day, as ransomware.live publishes them. A claim is not proof of a compromise.First claim2026-11-10Latest claim2026-11-10
Claims, last 30 days
17
Previous 30 days: 0
More than the 30 days beforeMore or fewer when the change is at least 3 claims and a quarter of the previous 30 days; otherwise close.
Data as of 2026-11-10 13:34Z
Get an alert if one of your domains is named on a ransomware leak site.
Monitor your domainsFree account · up to 5 monitored targets
Known infrastructure
The following Tor hidden services have been associated with this group:
climaxf4srk4qzr5g7smfodx6q5ocpiwmls5qujfl7g3j33us4cksdad.onion
These sites are malicious. Open them only from an isolated environment.
Who Climax inc targets
Share of its claims, through 2026-11-10.
Targeted sectors
- 01Manufacturing3 claims18 %
- 02Other3 claims18 %
- 03Retail and consumer3 claims18 %
- 04Hospitality and tourism2 claims12 %
- 05Business services1 claim6 %
- 06Energy and utilities1 claim6 %
- 07Healthcare1 claim6 %
- 08Technology1 claim6 %
Not specified2 claims12 %
Targeted countries
- 01USUnited States3 claims18 %
- 02INIndia2 claims12 %
- 03JPJapan2 claims12 %
- 04KRSouth Korea2 claims12 %
- 05BRBrazil1 claim6 %
- 06CNChina1 claim6 %
- 07ESSpain1 claim6 %
- 08FRFrance1 claim6 %
Not specified2 claims12 %
Check if you’re affected
Look up your domain to see whether it appears on Climax inc’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request