LeakBazaar
LeakBazaar is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
source: ransomware.live1 refs →
LeakBazaar
LeakBazaar is an active ransomware group that exposes victims on a dedicated leak site.
Analyst brief
LeakBazaar is an active ransomware and extortion group that publicizes victims on its dedicated leak site. The group targets organizations across various industries and regions, though specific victim profiles are not detailed in the provided data. Its primary TTPs involve double extortion through data exfiltration and encryption, using the public leak site as leverage. Defenders should prioritize network perimeter monitoring, securing offline backups, and maintaining vigilance against likely initial access vectors such as phishing or exposed services.
crime
FAQ2
What primary attack method does the LeakBazaar group use against its victims?
LeakBazaar uses double extortion, involving both data exfiltration and encryption, leveraging its public leak site to pressure victims.
What measures should defenders take against threats like LeakBazaar?
Defenders should prioritize network perimeter monitoring, securing offline backups, and maintaining vigilance against initial access vectors such as phishing or exposed services.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.