Skip to main content
Ransomware Group

Darkbit

DarkBit is an ideologically motivated ransomware group that appeared in February 2023, primarily targeting Israeli entities — most notably the Technion Institute of Technology — with politically charged ransom notes condemning Israeli government policies, assessed to be linked to Iranian state-sponsored activity.

Known victims0

Threat Level

LOW

Known Infrastructure

The following Tor hidden services have been associated with this group:

  • Error

Warning: These are malicious sites. Do not visit without proper security measures.

0

Check If You’re Affected

Search our database to see if your organization appears in Darkbit’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request