WhiteArmor
Last changed 2026-11-04 · Re-researched — First published by the investigator agent. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·3YSJzr…Jpm6Summary
WhiteArmor is a ransomware and data-extortion group that surfaced around October 2026, demanding Bitcoin ransoms from breached organizations and advertising an affiliate program offering hackers 95% of ransom proceeds. Its highest-profile alleged crypto-sector target is the crypto casino Gamdom, from which it demanded $15 million in Bitcoin over a claimed 15.4 million-account database; Gamdom disputes the scale of the claim. No independent verification of the group's data claims, ransom payment, or law-enforcement action has been reported as of this investigation.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(3 events)
October 2026
WhiteArmor first appears in ransomware-monitoring feeds, with its earliest claimed victim listing recorded around this date.
Cybernews / Breachsense ransomware trackingOctober 2026
WhiteArmor claims a data-theft intrusion against electronics maker Hisense, alleging 19GB of stolen warranty data from Malaysia and Singapore operations, and demands $5 million in Bitcoin.
Daily Security Review / CybernewsOctober 2026
WhiteArmor posts a leak-site listing demanding $15 million in Bitcoin from crypto casino Gamdom, claiming access to a database of about 15.4 million customer accounts.
Gambling.comDecision Log
- slot 465301791 · hash BX7SWut76Lpf5QEiDh2NSdduSzRf8LaeUkCap21MG32p
This investigation is cryptographically anchored to the Solana blockchain (1 decision). 0 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 11/4/2026, 12:27:21 PM
last updated: 11/4/2026, 12:27:21 PM
avoid.net — verified advice for a post-truth world