Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Active · #126 by victimsRansomware group
Crpxo
As of Oct 19, 2026, Crpxo has listed 37 confirmed victims on its leak site since Jul 9, 2026, 0.1% of all victims tracked by Brandefense. Its most targeted country is United States (62.2% of its victims) and its most targeted sector is Healthcare.
CRPxO is actively recruiting affiliates, offering: 🔹 70% revenue share 🔹 XMR/BTC payouts 🔹 Claimed payouts within 24 hours 🔹 $333 one-time affiliate access
Also known asCRPx0
Is My Company Listed?Follow CrpxoRequest IOC FeedTTPs, CVEs and malware →
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 37
- Rank By Victims
- #126
- Last Leak-Site Post
- Aug 2, 2026
- Top Country
- United States
- Top Sector
- Healthcare
Victims Posted Per Month.
36
1
0
0
| Month | Confirmed victims |
|---|---|
| July 2026 | 36 |
| August 2026 | 1 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
36
1
0
0
| Month | Confirmed victims |
|---|---|
| July 2026 | 36 |
| August 2026 | 1 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
36
1
0
0
| Month | Confirmed victims |
|---|---|
| July 2026 | 36 |
| August 2026 | 1 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Crpxo Victims.
Search all 37 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Encore Enterprises, Inc. encore.bz | USUnited States | Construction | 700 GB | |
| KUVEYT TURK kuveytturk.com.tr | TRTürkiye | Financial Services | 0.8 GB | |
| FINANSBANK qnb.com.tr | TRTürkiye | Financial Services | 2.3 GB | |
| ANADOLUBANK anadolubank.com.tr | TRTürkiye | Financial Services | 0.4 GB | |
| THY turkishairlines.com | TRTürkiye | Transportation and Logistics | 4.2 GB | |
| JOHNSON & JOHNSON jnj.com | USUnited States | Healthcare | 1.9 GB |
How They Operate.
Crpxo's threat actor profile lists 24 ATT&CK techniques, 10 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Crpxo Targets.
Sectors
History.
Busiest month on record: 36 confirmed victims
First confirmed victim listed on its leak site
First seen in Brandefense data
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.