Skip to main content
Ransomware Group

Ransomhouse

RansomHouse is a double-extortion RaaS operation active since late 2021, attributed to the threat actor "Jolly Scorpius," targeting over 120 organizations across healthcare, finance, transportation, and government, recently upgrading to a multi-layered dual-key encryption architecture.

Known victims213

Threat level

HIGH

Get an alert if one of your domains is named on a ransomware leak site.

Monitor your domainsFree account · up to 5 monitored targets

Known infrastructure

The following Tor hidden services have been associated with this group:

  • Ransomhouse ©
  • ©RansomHouse
  • zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion

These sites are malicious. Open them only from an isolated environment.

0

Check if you’re affected

Look up your domain to see whether it appears on Ransomhouse’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request