TRACKING7,741 stories in this site build1,675 vulnerability news stories in this site build
Incidents
Ransomware Blog
Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.
ransomware61 leak-site claims, all timeLatest observed leak-site post 2025-12-29ORKL search ↗
Portable threat brief
Ransomware Blog
Facts from stored data only; no AI-written text.
Opens the browser print dialog; choose Save as PDF.
PDF export is unavailable. The threat brief remains available below; use your browser's Print command.
Executive facts
Actor
Ransomware Blog
Kind
ransomware
Actor record created
2025-12-29
Latest observed
2025-12-29
Leak-site claims
61
Catalogued techniques
0
Scope
Tracked sectors
Manufacturing
Claim records
2023-04-18 to 2025-12-29
Vulnerability events linked to this group
No dated vulnerability events are attached to this group's linked vulnerabilities.
Verified techniques
No verified ATT&CK mapping for this group.
Defensive actions
No defensive actions are attached to this profile.
Most-claimed sectorsManufacturing
Activity window in this site's data
This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.
Claim records
First observed Latest observed
Verified ATT&CK phases represented
No verified ATT&CK mapping for this group
Origin and motivation
Origin and motivation not attributed.
No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.
Claims posted under this group's name or leak-site brand