Derp.ca
Data by ransomware.live opens in a new tab

Termite

Termite is a ransomware and extortion operation associated with incidents including the November 2024 disruption at Blue Yonder.

Profile source: Ransomware.live opens in a new tab

Termite

Family profile

Termite is a ransomware and extortion operation associated with incidents including the November 2024 disruption at Blue Yonder. This profile excludes the unrelated Linux backdoor and memory-only dropper that also use the Termite name.

Operational record

8
Indicators
1
YARA rules
1
Ransom notes
1
Leak sites
1 available

Published indicators

Sha 1

2 total
  • dbd05e2da5385928cbeb7b9695e825c588bede8e
  • a515b7d89676b1401eeb9eb776190a1179c386cf

Sha 256

2 total
  • 30a8cf3e6863030c762b468bf48d679f3dd053a80793770443938fa18de89617
  • f0ec54b9dc2e64c214e92b521933cee172283ff5c942cf84fae4ec5b03abab55

Md5

2 total
  • 4c58195328f5b5e4a37aa6f42b386172
  • 6b06aae5ec596cdbc1b9d4c457fd5f81

Ip

2 total
  • 193.43.104.153
  • 87.121.45.33

Recent claims

Affinia Healthcare

US / Healthcare

Jul 28, 2026

JD Young

CN

Jul 27, 2026

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab