fog Unknown

First seen: -
0
Total Victims
0
Victims (30d)
Details

Fog, which uses the .flocked extension for encrypted files, was first observed in May in campaigns by Storm-0844, a threat actor known for distributing Akira. By June, Storm-0844 was deploying Fog more than Akira.

Leak Site

Onion URL: http://xql562evsy7njcsngacphc2erzjfecwotdkobn3m4uxu2gtqh26newid.onion

Metadata

Slug: fog

Created: 14/01/2026 08:19

Updated: 07/03/2026 04:00

Back