Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Morpheus
As of Oct 19, 2026, Morpheus has listed 24 confirmed victims on its leak site since Jan 7, 2025, 0.1% of all victims tracked by Brandefense. Its most targeted country is United States (33.3% of its victims) and its most targeted sector is Technology.
Morpheus emerged in late 2024 as a semi-private RaaS operation whose affiliates share identical payloads with the HellCat ransomware group, targeting pharmaceutical, manufacturing, legal, and Italian ESXi environments with ransom demands reaching up to 32 BTC (~$3M USD).
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 24
- Rank By Victims
- #156
- Last Leak-Site Post
- Oct 1, 2026
- Top Country
- United States
- Top Sector
- Technology
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 1 |
| June 2026 | 3 |
| July 2026 | 3 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 1 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 1 |
| December 2025 | 2 |
| January 2026 | 1 |
| February 2026 | 1 |
| March 2026 | 2 |
| April 2026 | 1 |
| May 2026 | 1 |
| June 2026 | 3 |
| July 2026 | 3 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 1 |
| Month | Confirmed victims |
|---|---|
| January 2025 | 3 |
| February 2025 | 1 |
| March 2025 | 0 |
| April 2025 | 3 |
| May 2025 | 1 |
| June 2025 | 0 |
| July 2025 | 0 |
| August 2025 | 0 |
| September 2025 | 0 |
| October 2025 | 0 |
| November 2025 | 1 |
| December 2025 | 2 |
| January 2026 | 1 |
| February 2026 | 1 |
| March 2026 | 2 |
| April 2026 | 1 |
| May 2026 | 1 |
| June 2026 | 3 |
| July 2026 | 3 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 1 |
Latest Morpheus Victims.
Search all 24 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Superior Plating Technology CO superiortec.com | USUnited States | Technology | Not stated | |
| Yue Ki Industrial yueki.com.tw | TWTaiwan | Manufacturing | Not stated | |
| Kyowa Singapore Pte Ltd kyowasingapore.com | JPJapan | Consulting | Not stated | |
| Hansa Research Group Pvt. Ltd hansaresearch.com | INIndia | Consulting | Not stated | |
| Delegal Poindexter & Underkofler, P.A. protectingcareers.com | USUnited States | Legal Services | Not stated | |
| HDFC FUND hdfcfund.com | INIndia | Financial Services | Not stated |
How They Operate.
Morpheus's threat actor profile lists 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Morpheus Targets.
History.
Busiest month on record: 3 confirmed victims
First confirmed victim listed on its leak site
First seen in Brandefense data
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.