# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: eraleig ransomware

# Reference: https://twitter.com/AlvieriD/status/1782471876897394839
# Reference: https://twitter.com/karol_paciorek/status/1783071332583780594
# Reference: https://rakeshkrish.medium.com/apt73-eraleig-news-unveiling-new-ransomware-group-55aec3e873ff
# Reference: https://www.virustotal.com/gui/ip-address/176.97.75.205/detection

eraleignews.com
ns1.eraleignews.com
ns2.eraleignews.com
ns3.eraleignews.com
ns4.eraleignews.com
bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion
basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion
basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion
qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onion

# Reference: https://github.com/marktsec/Ransomware_Official_Domains#apt73

wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion

# Reference: https://www.thedfirspot.com/general-8-1

fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion
