Xp95
Ransomware Group Profile
Overview
XP95 is a cyber-extortion group that emerged in March 2026, using a pure data-theft-and-extortion model with a Windows XP/95-themed leak site, with notable targets including Statistics South Africa (154 GB exfiltrated) and the Gauteng Provincial Government.
Dark Web Infrastructure (1)
37lfmtakhknzx5t6k57ieijkiqrc4c3kpimfvrmafva25ut2tknvw3yd.onion
Activity Timeline
First Seen2026
Last Seen2026
Leak Sites1
Quick Actions