Ransomware Group
Destello
Known victims1Distinct claims on its leak site, one per victim and day, as ransomware.live publishes them. A claim is not proof of a compromise.First claim2026-11-05Latest claim2026-11-05
Claims, last 30 days
1
Previous 30 days: 0
Close to the 30 days beforeMore or fewer when the change is at least 3 claims and a quarter of the previous 30 days; otherwise close.
Data as of 2026-11-05 11:20Z
Get an alert if one of your domains is named on a ransomware leak site.
Monitor your domainsFree account · up to 5 monitored targets
Known infrastructure
The following Tor hidden services have been associated with this group:
destell6tk2la7w4d7d4apfzsywbt2lsdpui7i2rsfyrike7pxolrbyd.onion
These sites are malicious. Open them only from an isolated environment.
Who Destello targets
Share of its claims, through 2026-11-05.
Targeted sectors
- 01Financial services1 claim100 %
Targeted countries
- 01BRBrazil1 claim100 %
Check if you’re affected
Look up your domain to see whether it appears on Destello’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request