Termite ransomware group

Who they are

No published writeup exists for Termite that we would stand behind, which is common for newer and short-lived crews. What we can say comes from the site itself: it is responding to our checks, and it states industries we have grouped into 1 sector.

Descriptions are compiled from public reporting and vendor research. They describe how a group has historically operated and can lag its current behaviour; the status and timings above are our own.

Current status

Termite's leak site is answering our checks. That does not mean the group is actively posting — plenty of sites stay up for months with nothing new on them — but the infrastructure is live.

The last change we recorded on it was 17h ago (4 Sep 2026 19:30 UTC).

Which organisations this group has named, and when, is part of the SINON platform rather than this page. Create an account to search it, or to be told automatically if a name you care about turns up.

Sectors targeted

Industries this group has been observed going after, most common first.

• Everglades Boats

Leak site capture

Termite's extortion site as we last captured it, served through our own origin — opening the real thing would put you on their infrastructure.