aurora
Known ransomware group ACTIVE Currently active
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
1
Total Claims
0
Critical
—
Records Claimed
1
Industries Hit
Active span: Oct 16, 2026 – Oct 16, 2026 · 1 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Oct 2026 (1)Oct 2026
LessMore
Oct 2026Share this profile
Top Targeted Industries
Transportation 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
1
Known leak sites