Derp.ca
Ransomware group

Dan0n

dAn0n appeared in March 2024 as a data-theft and extortion operation.

Profile source: WatchGuard Threat Lab opens in a new tab

Dan0n

Family profile

dAn0n appeared in March 2024 as a data-theft and extortion operation. The group published stolen data and pressured victims through a staged notification process, with no confirmed use of a ransomware encryptor during its original campaign. The same operators later resurfaced as White Lock with file-encryption capability.

Ransomware.live

Operational record

View group record ↗
1
YARA rules
1
Leak sites
0 available

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

adam:ONE opens in new tab Tria.ge opens in new tab IPinfo opens in new tab urlscan.io opens in new tab eCrime.ch opens in new tab Mallory opens in new tab