Skip to content
Submit incident
DII-2025-00147
ReportedReported by fewer than three independent publishers, with no official finding.

VanHelsing ransomware builder leaked on hacking forum

The VanHelsing ransomware-as-a-service operation published the source code for its affiliate panel, data leak blog, and Windows encryptor builder after an old developer tried to sell it on the RAMP cybercrime forum...

22 May 2025 · Ransomware and extortion
22 May 2025
DII-2025-001473 sources ↓
Quick facts
Category
Ransomware and extortion
Source
DataBreaches.net
Date
22 May 2025
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Ransomware and extortion

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
VanHelsing ransomware builder leaked on hacking forum
22 May 2025
x.com
Emanuele De Lucia
bleepingcomputer.com
BleepingComputer