Threat Actor Profile
High
Cybercriminal
Confidence Score
Tags
ransomware
ransomware.live
First Seen
Unknown
Last Updated
Unknown
Active Status
ActiveCreated
April 29, 2026
Indicators of Compromise
Loading IOCs…
IOC KQL for Sentinel
STIX Data
{'added_date': None,
'client': '2003264@sit.singaporetech.edu.sg',
'description': None,
'firstseen': '2023-04-13T01:02:03.456789+00:00',
'group': 'funksec',
'has_negotiations': False,
'has_ransomnote': False,
'lastseen': '2025-03-18T16:57:05.801729+00:00',
'locations': [{'available': False,
'fqdn': 'pke2vht5jdeninupk7i2thcfvxegsue6oraswpka35breuj7xxz2erid.onion',
'slug': 'http://pke2vht5jdeninupk7i2thcfvxegsue6oraswpka35breuj7xxz2erid.onion',
'title': 'Funksec',
'type': 'DLS'},
{'available': False,
'fqdn': 'funkxxkovrk7ctnggbjnthdajav4ggex53k6m2x3esjwlxrkb3qiztid.onion',
'slug': 'http://funkxxkovrk7ctnggbjnthdajav4ggex53k6m2x3esjwlxrkb3qiztid.onion',
'title': 'New Address Blog',
'type': 'DLS'},
{'available': False,
'fqdn': 'funksec53xh7j5t6ysgwnaidj5vkh3aqajanplix533kwxdz3qrwugid.onion',
'slug': 'http://funksec53xh7j5t6ysgwnaidj5vkh3aqajanplix533kwxdz3qrwugid.onion',
'title': 'Funksec v3.0',
'type': 'DLS'},
{'available': False,
'fqdn': 'funknqn44slwmgwgnewne6bintbooauwkaupik4yrlgtycew3ergraid.onion',
'slug': 'http://funknqn44slwmgwgnewne6bintbooauwkaupik4yrlgtycew3ergraid.onion',
'title': 'New Address Blog',
'type': 'DLS'},
{'available': True,
'fqdn': 'funksec.top',
'slug': 'http://funksec.top',
'title': '...',
'type': 'DLS'},
{'available': False,
'fqdn': '7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion',
'slug': 'http://7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion',
'title': 'Funksec',
'type': 'DLS'},
{'available': False,
'fqdn': 'ykqjcrptcai76ru5u7jhvspkeizfsvpgovton4jmreawj4zdwe4qnlid.onion',
'slug': 'http://ykqjcrptcai76ru5u7jhvspkeizfsvpgovton4jmreawj4zdwe4qnlid.onion',
'title': '',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 0,
'tiaras_metadata': {'has_negotiations': False,
'has_ransomnote': False,
'locations': [{'available': False,
'fqdn': 'pke2vht5jdeninupk7i2thcfvxegsue6oraswpka35breuj7xxz2erid.onion',
'slug': 'http://pke2vht5jdeninupk7i2thcfvxegsue6oraswpka35breuj7xxz2erid.onion',
'title': 'Funksec',
'type': 'DLS'},
{'available': False,
'fqdn': 'funkxxkovrk7ctnggbjnthdajav4ggex53k6m2x3esjwlxrkb3qiztid.onion',
'slug': 'http://funkxxkovrk7ctnggbjnthdajav4ggex53k6m2x3esjwlxrkb3qiztid.onion',
'title': 'New Address Blog',
'type': 'DLS'},
{'available': False,
'fqdn': 'funksec53xh7j5t6ysgwnaidj5vkh3aqajanplix533kwxdz3qrwugid.onion',
'slug': 'http://funksec53xh7j5t6ysgwnaidj5vkh3aqajanplix533kwxdz3qrwugid.onion',
'title': 'Funksec v3.0',
'type': 'DLS'},
{'available': False,
'fqdn': 'funknqn44slwmgwgnewne6bintbooauwkaupik4yrlgtycew3ergraid.onion',
'slug': 'http://funknqn44slwmgwgnewne6bintbooauwkaupik4yrlgtycew3ergraid.onion',
'title': 'New Address Blog',
'type': 'DLS'},
{'available': True,
'fqdn': 'funksec.top',
'slug': 'http://funksec.top',
'title': '...',
'type': 'DLS'},
{'available': False,
'fqdn': '7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion',
'slug': 'http://7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion',
'title': 'Funksec',
'type': 'DLS'},
{'available': False,
'fqdn': 'ykqjcrptcai76ru5u7jhvspkeizfsvpgovton4jmreawj4zdwe4qnlid.onion',
'slug': 'http://ykqjcrptcai76ru5u7jhvspkeizfsvpgovton4jmreawj4zdwe4qnlid.onion',
'title': '',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 0,
'ransomware_live_group': 'funksec',
'tools': {},
'url': 'https://www.ransomware.live/group/funksec',
'victims': 172,
'vulnerabilities': []},
'tiaras_source': 'ransomware.live',
'tools': {},
'ttps': [],
'url': 'https://www.ransomware.live/group/funksec',
'victims': 172,
'vulnerabilities': []}