Skip to content
RansomwareFinancialIntermediate sophistication

Arvin Club

Arvin Club is a ransomware group with a financial motive, tracked by Brandefense. It targets 3 sectors, including Technology and Finance, in 6 countries, including the United States and the United Kingdom.

Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

Labelsransomware

About Arvin Club.

Arvin Club is a threat actor with hacktivist leanings that first appeared in May 2021, primarily publishing stolen data via a TOR site and Telegram rather than deploying file-encrypting ransomware, targeting government, education, and banking sectors globally including Iranian government entities.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.