ArvinClub
ArvinClub is a ransomware group with a financial motive, tracked by Brandefense. It targets 3 sectors, including Technology and Finance, in 6 countries, including the United States and the United Kingdom.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
Arsenal · Malware And Tools.
- Arvin Clubmalware
Indicators Of Compromise.
TLP:AMBER+STRICT1 indicator on the Brandefense platform
IP, domain and hash indicators · YARA rules · ATT&CK Navigator export
Request A DemoAbout ArvinClub.
Arvin Club is a threat actor with hacktivist leanings that first appeared in May 2021, primarily publishing stolen data via a TOR site and Telegram rather than deploying file-encrypting ransomware, targeting government, education, and banking sectors globally including Iranian government entities.
Last updated Oct 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.