Threat Actor Profile
Low
Cybercriminal
Description
ℹ️ La Piovra Ransomware is an exercise of the company Offensive Security (also known as OffSec)
Confidence Score
Tags
ransomware
ransomware.live
First Seen
Unknown
Last Updated
Unknown
Active Status
ActiveCreated
April 29, 2026
Indicators of Compromise
Loading IOCs…
IOC KQL for Sentinel
STIX Data
{'added_date': None,
'client': '2003264@sit.singaporetech.edu.sg',
'description': 'ℹ️ La Piovra Ransomware is an exercise of the company '
'Offensive Security (also known as OffSec)',
'firstseen': '2022-06-25T10:41:52+00:00',
'group': 'la_piovra',
'has_negotiations': False,
'has_ransomnote': False,
'lastseen': '2022-06-25T10:41:52+00:00',
'locations': [{'available': False,
'fqdn': 'wx3djgl4cacl6y4x7r4e4mbqrrub24ectue7ixyix2du25nfowtvfiyd.onion',
'slug': 'http://wx3djgl4cacl6y4x7r4e4mbqrrub24ectue7ixyix2du25nfowtvfiyd.onion',
'title': 'La Piovra Ransomware - Members Only ',
'type': 'DLS'},
{'available': False,
'fqdn': 'et22fibzuzfyzgurm35sttm52qbzvdgzy5qhzy46a3gmkrrht3lec5ad.onion',
'slug': 'http://et22fibzuzfyzgurm35sttm52qbzvdgzy5qhzy46a3gmkrrht3lec5ad.onion',
'title': ' La Piovra Ransomware ',
'type': 'DLS'},
{'available': False,
'fqdn': 'h3txev6jev7rcm6p2qkxn2vctybi4dvochr3inymzgif53n2j2oqviqd.onion',
'slug': 'http://h3txev6jev7rcm6p2qkxn2vctybi4dvochr3inymzgif53n2j2oqviqd.onion',
'title': 'La Piovra Ransomware – a new cartel',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 0,
'tiaras_metadata': {'has_negotiations': False,
'has_ransomnote': False,
'locations': [{'available': False,
'fqdn': 'wx3djgl4cacl6y4x7r4e4mbqrrub24ectue7ixyix2du25nfowtvfiyd.onion',
'slug': 'http://wx3djgl4cacl6y4x7r4e4mbqrrub24ectue7ixyix2du25nfowtvfiyd.onion',
'title': 'La Piovra Ransomware - Members '
'Only ',
'type': 'DLS'},
{'available': False,
'fqdn': 'et22fibzuzfyzgurm35sttm52qbzvdgzy5qhzy46a3gmkrrht3lec5ad.onion',
'slug': 'http://et22fibzuzfyzgurm35sttm52qbzvdgzy5qhzy46a3gmkrrht3lec5ad.onion',
'title': ' La Piovra Ransomware ',
'type': 'DLS'},
{'available': False,
'fqdn': 'h3txev6jev7rcm6p2qkxn2vctybi4dvochr3inymzgif53n2j2oqviqd.onion',
'slug': 'http://h3txev6jev7rcm6p2qkxn2vctybi4dvochr3inymzgif53n2j2oqviqd.onion',
'title': 'La Piovra Ransomware – a new '
'cartel',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 0,
'ransomware_live_group': 'la_piovra',
'tools': {},
'url': 'https://www.ransomware.live/group/la_piovra',
'victims': 1,
'vulnerabilities': []},
'tiaras_source': 'ransomware.live',
'tools': {},
'ttps': [],
'url': 'https://www.ransomware.live/group/la_piovra',
'victims': 1,
'vulnerabilities': []}