ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
PrinzEugen
2 incidentes
1 paises
0 sectores
threat-actor Ultimo: 2026-06-29
PrinzEugen is a financially motivated ransomware group that first emerged in February 2026. The group's primary objective is financial gain, achieved through a dual approach of encrypting victim data and exfiltrating sensitive information. PrinzEugen distinguishes itself by publicly threatening to release stolen data on leak sites if ransom demands are not met by their targets, employing a clear and direct extortion strategy.
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| DLS / leak site | unknown | ransomware.anggipradana.com | Ransomware Group: PrinzEugen |
| DLS / onion | unknown | prinzfkbjiazbrur4mjje6mntjc4vydx3iatkkzycufoylqcoo4y7pqd.onion | Ransomware Victim: Driving School Software (PrinzEugen) |
| DLS / onion | issue | prinzkpn6d3itrgcytmsmlcpt5mgwn3ihpck2hsed5cezlbtbi3wklid.onion | CTI.FYI |
| DLS / leak site | unknown | nitter.net | Ido Cohen: Threat Group Update Prinz Eugen has launched a newly redesigned leak site and updated its public profile. According to the group's latest statement, it describes itself as a for-profit organization that "specializes in hacking" while claiming it currently does not operate a Ransomware-as-a-Service (RaaS) program. The group also stated that membership intake is currently closed and limited to existing core members. |
| X/Twitter | unknown | x.com | Ido Cohen: Threat Group Update Prinz Eugen has launched a newly redesigned leak site and updated its public profile. According to the group's latest statement, it describes itself as a for-profit organization that "specializes in hacking" while claiming it currently does not operate a Ransomware-as-a-Service (RaaS) program. The group also stated that membership intake is currently closed and limited to existing core members. |
| DLS / onion | offline | 6cudc5cqa2bjpwdhcwm2lj6dbqejjjqzeo6ipwvmbazr6cgu7vfk3dad.onion | CTI.FYI |
| DLS / onion | offline | prinzfkbjiazbrur4mjje6mntjc4vydx3iatkkzycufoylqcoo4y7pqd.onion | CTI.FYI |
Paises afectados
Paises objetivo (OSINT)
France
United Kingdom
United States
South AfricaSectores objetivo (OSINT)
FinanceProfessional&Technical ServicesEducational ServicesOtherPublic AdministrationInsuranceBusiness Schools and Computer and Management TrainingIndividual and Family ServicesBanking