Rancoz
Ransomware Group Profile
Overview
Rancoz is a Windows-targeting ransomware strain first observed in November 2022 that appends the ".rec_rans" extension to encrypted files, considered a Vice Society copycat, deployed against a small number of organizations using double extortion and linked to the same developer as the "Buddy" ransomware.
Dark Web Infrastructure (1)
ze677xuzard4lx4iul2yzf5ks4gqqzoulgj5u4n5n4bbbsxjbfr7eayd.onion
Activity Timeline
First Seen2023
Last Seen2023
Leak Sites1
Quick Actions