RansomHouse

This group started operating during the first quarter of 2022. They published samples of alleged stolen data from companies on their site on Tor. It is unclear if they conducted the attacks themselves, or if they bought leaked databases from third parties.

Targets: Private sector

Recent activity

• the RansomHouse ransomware group has disclosed a listing for the military group Namibian Defence Force, claiming to hold confidential data and project documents
  mastodon · Nov 2, 2026

References

• https://webz.io/dwp/new-ransomware-group-ransomhouse-is-it-real-or-fake/
• https://www.ransomlook.io/group/ransomhouse

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.