aurora Ransomware
Tracked since Apr 29, 2026
2
victims recorded
2
in the last 30 days
0
CVEs
2d
Last activity
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Most affected countries (30 days)
- United States1
- Spain1
Most affected sectors (30 days)
- Other1
- Retail & E-Commerce1
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live