Ransomware Group
Xp95
XP95 is a cyber-extortion group that emerged in March 2026, using a pure data-theft-and-extortion model with a Windows XP/95-themed leak site, with notable targets including Statistics South Africa (154 GB exfiltrated) and the Gauteng Provincial Government.
Known victims0
Threat Level
LOW
Known Infrastructure
The following Tor hidden services have been associated with this group:
403 Forbidden
Warning: These are malicious sites. Do not visit without proper security measures.
Check If You’re Affected
Search our database to see if your organization appears in Xp95’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request