[{"content":"BlackSuit Royal Ignoble Scorpius Dapper Scorpius Ransomware / Closed Group Windows Linux VMware ESXi .blacksuit AnyDesk rclone CCleaner Advanced IP Scanner SMBExec Ansible Conti Kansas City Aviation Center US Air transport metromont.com Construction Inns of Aurora Hospitality Gloucester County Virginia Government and administrations Pacific Metallurgical Manufacturing The Fortune Society Healthcare Massachusetts Municipal Wholesale Electric Electricity dapope.com Town of Orangeville CA Local administrations midwest.com Pharmacy and drugs manufacturing copresi.es ES JTEKT NORTH AMERICA Grandview School District Schools co.cullman.al.us Central administration and government eastgateauto.com Automotive kciaviation.com Avionics hetrhedens.nl NL brandywinecoachworks.com kapurinc.com IN Information Technologies Consulting klarenbeek-transport.nl Transport surgicalassociates.com billyheromans.com Retail \u0026 E-Commerce kenmore.com marysville.k12.oh.us Academic Institutions stalyhill-inf.tameside.sch.uk GB steppingstonesd.org jst.es Technology jarrellimc.com Supply Technologies Maxxis International VN dezinecorp.com Unknown SVP Worldwide nathcompanies.com wescan-services.com LU Services deschampsimp.com omara-ag.com DE Telecommunications nrcs.net CH zyloware.com unitedsprinkler.com Aerotecnic Teddy SpA IT rcschools.net mopsohio.com Finance Kansas City Hospice Neighbors Credit Union Volta River Authority GH GenPro Inc. Road transport Branhaven Chrysler Dodge Jeep Ram decalesp.com lolaliza.com - 250kk BE Apparel Menninger Clinic cottlesinc.com Transportation \u0026 Logistics FD Lawrence Electric Energy \u0026 Utilities Hostetler Buildings Charles Darwin School Parrish OSDA Contract Services Southwest Traders Food and drinks businesses Nevada Heart Vascular Center MorningStar Senior Living Goodless Dermatology Effortless Office Hollywood Burbank Airport Clatronic International GmbH malonetoyota.com Academy of Model Aeronautics Non-Governmental Organizations (NGOs) widex.com DK nwcsb.com Bandier Forrec Bettis Asphalt aikenhousing.org acsi.org www.chsd117.org hanoverhill.com Pojoaque RhinoCorps Reward Hospitality from EFC Group AU gbhs.org 07/12 Publication 51gb Image Microsystems City of Cedar Falls a-g.com 7/10/24 - data publication 38gb (150K) National Health Laboratory Services ZA KADOKAWA Corporation JP Entertainment industry rbbschools.net axiavg.com Banking institutions ibewlocal1.org doityoungs.com keeservices.com theeyeclinicsurgicenter.com sanglier.org.uk arangobillboard.com Revolution Resources Oil The Kansas City Kansas Police Department Defense Peregrine Petroleum Eurotrol B.V. Special Health Resources Ipsotek LTD colfax.k12.wi.us - $150.000 Sichuan Dowell Science and Technology Company Inc CN hiawathahomes Human Services catiglass.com $100.000 Vision Mechanical pierfoundry.com Mining Jackson County Montgomery County Board of Developmental Disabilities Services frankmiller.com Mewborn \u0026 DeSelms Legal Services Young Consulting Consulting Rafael Viñoly Architects Architecture / Engineering TRC Talent Solutions Nestoil NG Herron Todd White Peter Condakes Octapharma Plasma UPC Technology Corporation TW Biggs Cardosa Associates Business Services The Post and Courier Media \u0026 Entertainment MCP GROUP Commercial Contractor Topeka JM Heaford Eagle Hydraulic Components MULTI-FILL Brewer \u0026 Company of WV Olea Kiosks Hudson Supplies Homeocan Ellsworth Cooperative Creamery SERVICES INFORMATIQUES POUR PROFESSIONNELS(SIP) Phillip Townsend Associates Precision Pulley \u0026amp;amp; Idler Gaia Herbs Partridge Venture Engineering Professional Services South St Paul Public Schools Education Judge Rotenberg Center Withall Attorney WALKERSANDFORD H + G EDV Vertriebs Group Health Cooperative - Rev 500kk PowerRail Distribution Gilmore Construction J A Piper Roofing Antunovich Associates Western Municipal Construction Southwest Binding \u0026 Laminating Campaign for Tobacco-Free Kids North Hill Consumer Products Groveport Madison Schools Delco Automation Kershaw County School District Blaine County Schools GOLFZON Sports Henry County Schools fps.com Centroedile Milano DePauw University Universities New River Community Technical College Huber Heights Select Education Group Hawkeye Area Community Action Program, Inc Government of Brazil - Business Information Brazil BR Multidev Technologies Financial Services Commission Financial organizations IT Luggage Distribution ZooTampa at Lowry Park Culture and entertainment Venture Logistics Stant MARJAM Supply company Double extortion T1566 Phishing T1190 Exploit Public-Facing Application T1059 Command and Scripting Interpreter T1003 OS Credential Dumping T1486 Data Encrypted for Impact T1485 Data Destruction T1489 Service Stop T1566.001 Spearphishing Attachment T1608.006 SEO Poisoning T1078 Valid Accounts T1566.004 Spearphishing Voice T1195.002 Compromise Software Supply Chain T1003.001 LSASS Memory T1003.003 NTDS T1003.006 DCSync T1557 Adversary-in-the-Middle T1558.002 Steal or Forge Kerberos Tickets T1021.001 Remote Desktop Protocol T1021.002 SMB/Windows Admin Shares T1570 Lateral Tool Transfer T1562.001 Impair Defenses T1048 Exfiltration Over Alternative Protocol T1567 Exfiltration Over Web Service T1567.002 Exfiltration to Cloud Storage T1057 Process Discovery T1490 Inhibit System Recovery T1564.006 Run Virtual Instance T1047 Windows Management Instrumentation T1218.010 System Binary Proxy Execution T1083 File and Directory Discovery T1204 User Execution","permalink":"https://priv8t.com/ransomware/blacksuit/","summary":"Overview Platforms: Windows · Linux · VMware ESXi Variants: BlackSuit · Royal Extensions: .blacksuit ATT\u0026CK software: AnyDesk · rclone · CCleaner · SMBExec · Ansible · BlackSuit · Advanced IP Scanner Initial access: Phishing · Exploit …","title":"BlackSuit"},{"content":"8Base Squalid Scorpius Phobos Ransomware / Affiliate Operation Windows .8base .eight SmokeLoader AnyDesk SystemBC Netscan Fast.exe Phobos (customized version) Microsoft Windows Roman Berezhnoy Egor Nikolaevich Glebov Affiliate 2803 St. Nicholas School BR Schools Héron BE Unknown Tan Teck Seng Electric (Co) Pte Ltd SG Technology High Learn Ltd GB Education Southeast Supply US Retail \u0026 E-Commerce Cabinet JEAN LOUVEL SAOUDI FR Legal Services FIO Delta Dental of Washington Insurance services Netform GmbH DE Manufacturing Wynnewood High School Universities Moraviakov s.r.o. CZ Bring Solution Gebäudereinigungsakademie AT Business Services HECTARE Lake Shore Public Schools SPORT BOUTIQ Shops CED Solutions Computer IT Training Centers Information Technologies Consulting IRO PARIS Weininger Metall System GmbH Omnitravel Non-Governmental Organizations (NGOs) ASCOM S.p.A. IT Automotive Bergström Wines Food and drinks businesses Lyons Specialty Co. SolGeo AG Baugelogie and Geotechnik CH Research Grupo Buddemeyer VOLTAIRE AVOCATS Jay Enn Corporation Tarnaise des Panneaux SAS Carrollton Orthopaedic Clinic Healthcare Sicoob Finance Grupo Bébécar PT CLARKE CENTRE D'IMAGERIE MEDICALE INC. CA GNK Golf ES Sports Mint Pharmaceuticals Pharmacy and drugs manufacturing Port of Rijeka HR Maritime transport Originpath Group ISEKI and CO.,LTD JP EuroDruk PL InnoGroup Media \u0026 Entertainment TRAFILERIE ALLUMINIO ALEXIA S.P.A. SOFPO (Exideuil) SCHUMAG AKTIENGESELLSCHAFT Wild Apple Graphics Evlox Hauschild Installationen Construction ErgoFloor DK Island Grill JM Volkswagen group Groupe Bayard Kerkstoel Futureguard Daldoss Elevetronic Stone Future inc Services LCS and Partners TW Topserve Service Solutions PH Airlines TC Capital Asia Limited HK Consulting Taiyo Kogyo Co., Ltd. Hokushinko Co., Ltd. Ojai srl Embotits Espina, SLU ISETO CORPORATION Nidec Motor Corporation S L B TRANSIT INC Transport Natsume Tax Accountant Corporation The Kelly Group Osaka Motorcycle Business Cooperative Matusima Shirasaki Architecture LEJEUNE GIOVANELLI Agriculture \u0026 Food ALO diamonds Crooker Embellir LEMKEN Coplosa New Boston Dental Care Consumer Products Service public de Wallonie Cushman Contracting Corporation Costa Edutainment SpA Public sector Sigmund Espeland AS NO Architecture / Engineering Brovedani Group Fic Expertise W.I.S. Sicherheit Calumet Civil Contractors, Inc. IN The Line Up, Inc Medizinische Grosshandlung GmbH Lumina Americas MX Wasserkraft Volk AG Energy \u0026 Utilities The Tech Interactive Culture Speedy France Bieler + Lang GmbH FEB31st Luxury LYON TERMINAL R.B. Woodcraft, Inc. GPI Corporate AU Marketing SOA Architecture The Souza Agency Inc. LEMODOR Council for Relationships Public Health ASMFC: Atlantic States Marine Fisheries Commission Human Services Mahoney Foundry, Inc. Z Development Services, LLC DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC Attorney Inno-soft Info Systems Pte Ltd Ringhoffer Verzahnungstechnik GmbH and Co. KG Samhwa Paint Ind. Ltd KR Tamura Corporation Apex Business Advisory Pim UNDP Lindos Group Of Companies BM isophon glas GmbH HC Querétaro Springfield Sign ÖSTENSSONS LIVS AB SE Filexis AG Treuhand und Immobilien Market infrastructures RSHP Brewer Davidson NZ Forstinger Österreich GmbH Federchimica CHRG Entertainment industry Sprimoglass Enplast Kudulis Reisinger Price Global Zone Mediplast AB Essential Labs Saudia MRO SA Bertani Trasporti Spa ROYAL INSIGNIA RWF Frömelt Acies Srl C and J Industries, Inc. Helical Technology Healthcare research Axel Johnson UNIFER Institutional Casework, Inc ATB SA Ingénieurs-conseils SIA LILI'S BROWNIES PWS - The Laundry Company PJ Green Inc Telecommunications Worthen Industries CERALP Harinck Anderco PTE LTD Tetrosyl Group Limited Therme Laa Hotel and Silent Spa Hotel Karl Rieker GmbH and Co. KG YRW Limited - Chartered Accountants Precision Tune Auto Care Elliott Wave International Financial organizations VVD Elettrotecnica Srl Basin Trucking and Oilfield Services LLC Gas Nbbl International organizations Meag Va-system AB Séquano Geographe Diamond Technical Services, Inc. Professional Services Able One a Quadbridge Company Groupe Sweetco Bikesportz Imports La Ligue Midwest Service Center Sunfab Hydraulics AB Glimstedt ARPEGE C and F Packing Company Inc. Malongo France Axfast AB Hospitality Syndicat Général des Vignerons de la Champagne Washtech SIVAM Coatings S.p.A. Nexus Telecom Switzerland AG Former S.p.A. International Trade Brokers and Forwarders Transportation \u0026 Logistics BALLAY MENUISERIES Anderson King Energy Consultants, LLC Sems and Specials Incorporated Horizon Pool \u0026 Spa Davis Cedillo \u0026 Mendoza Inc LCGB LU Human Resources CETEC Ingénierie The International School of Management Employ Milwaukee socadis WELBRO Building Corporation Insidesource Lodging industry SBK Real Estate CACG VAC-U-MAX Hawkins Sales William Jackson Food Group Groupe PROMOBE Soethoudt metaalbewerking b.v. NL REUS MOBILITAT I SERVEIS Tim Davies Landscaping Visan Lischkoff and Pitts, P.C. SMG Confrere Calgary TELUS Convention Centre astley. UK Yale Appliance Incisive Media Honey Birdette GOLDMUND Wild Republic Utility Groupe Apex-Isast Leezer Agency Cimbali National Accounts Fortiss LLC APVL ingénierie Cold Car Spa La Contabile Spa DMC Luxembourg Hills Legal Group Ltd Brown's Bay Packing Company Imperiali AG Hahn \u0026 Clay, Inc. Oil Ingeniería FULCRUM Scheidt GmbH Gallagher Tire, Inc. Distribution MODERNGRAB, S.A. Storey Trucking Company, Inc. APREVYA Lanificio Luigi Colombo S.p.A. MERRILL Technologies Group Ontario Pork Parsons Investments Groupe Faubourg Traxall France Armstrong Consultants JAI A/S Schöler Fördertechnik AG Romulo Law Offices Legislative branch (parliamentary chambers) Kingsport Times-News IBACOS Wilson Lewis ZINSER GmbH Carter Transport Claims AVA Limited Pine River Pre-Pack, Inc Harmann Studios Inc EDUARDO G. BARROSO SURTECO North America Edwards Business Systems Brunton Shaw JC Roman Construction APS - Automotive Parts Solutions Comtek Advanced Structures, a Latecoere Company KTUA Landscape Architecture and Planning ExdionInsurance Petersen Johnson Sabian Inc Ted Pella Inc. Praxis Arndt und Langer C.F. Service \u0026 Supply Cloud service providers Kona Equity Notel Muenz-Engineered Sales WEBBER RESTAURANT GROUP SUD TRADING COMPANY J.T. Cullen Co., Inc. Springer Eubank FabricATE Engineering The Envelope Works Ltd Araújo e Policastro Advogados Delta Group Ford Covesa UNIVERSAL REALTY GROUP Conselho Superior da Justiça do Trabalho Defense ministries (including the military) FRESH TASTE PRODUCE USA AND ASSOCIATES INC. Chula Vista Electric (CVE) CL Electricity VVandA Prodegest Assessors Fenn Termite and Pest Control PRIDE GLOBAL CONSULTING SL Petkus Brothers PT. Cahaya Benteng Mas ID Shanghai FRP Research Institute Co., Ltd. CN Community Council of South Central Texas SKYROOT Varna Packaging LK KLM Laboratories Pvt. Ltd HFH Capital Community Action INSTITUTO NACIONAL DE ELECTRIFICACION GT FA Foundry Sydenham Laboratories Bahamas Medical \u0026 Surgical Supplies BS Hoosick Falls Central School District Royal Oak Pet Clinic GN Mil-Ken Travel Travel and tourism industry Kevills Solicitors The Law Offices of Steven H. Heisler ToyotaLift Northeast Keystone Insurance Services ANS Aspect Structural Engineers Stockdale Podiatry CH informatica Delaney Browne Recruitment Oregon Sports Medicine SatCom Marketing RevZero, Inc Rossman Realty Group, inc. MBS Equipment TTI Renewable energies Jacklett Construction LLC Kersey  CO Kersey and Co Citizens BoomData |Data and Analytics Consultancy Spectra Industrial Miranda Brokerage Institut Mensalus S.L. FANSIPAN CONSTRUCTION CONSULTANTS CO.,LTD DV8 Technology Group CROWD BoomData | Data \u0026 Analytics Consultancy EJM Engineered Systems Exbon Development, Inc Civil society Chan and Associates Anesco Ltd CashCall, Inc. Venture Drilling Supply Mining CPA Advisors Group Info Salons Telepizza The Traffic Tech Quikcard Solutions Inc. Jadranka Group Dental One Craigieburn ANL Packaging BTU AR Weitkamp · Hirsch \u0026 Kollegen Steuerberatungsgesellschaft mbH Pesquera Diamante S.A. PE Kansas medical center LLC Danbury Public Schools Advanced Fiberglass Industries Citelis Mobility Motor Components, LLC Cabra Consulting Ltd New Century Advisors, LLC ROBERT L BAYLESS PRODUCER LLC KIRWIN FRYDAY MEDCALF Lawyers LLP Polanglo ISPE Connecting Pharmaceutical Knowledge PORTERROOFING CON-STRUCT JOB-SA BETON J.O.B SA CLEAR MEDI HEALTHCARE Lysander Shipping LEGALILAVORO PNEUMAX CYBERFREIGHT SYSTEMS MARITIMES INC. SITARA MAXIMUM PRIME ALIMENTOS EIRELI The Akin Law LLC Onsupport Corporation Texas Hotel and Lodging Association TARLE LAW, P.C. PrintGlobe, Inc. BLUESAGE Futura Agronegócios LOONGSON PORTBLUE DANIEL C. HARRIS, O.D Hornbill Stone Fox Ventures Ligas Gerais Industria E Comercio Studio Legale Ranchino Law Offices of Sergio J. Siderman San Luis Obispo County Office of Education Law Society of South Africa ZA Jeff Wyler Automotive Family, Inc. Transprensa CO CEMAF PARTICIPACOES E ADMINISTRACAO DE BENS LTDA Defesa da Classe Trabalhadora (Declatra) LUZBOA S.A TECHCERT PREMIER HOSPITAL DIA CLONARTE SINTTEL RJP MEDICAL LTDA Ampla Divisórias Bibliotheek Gouda Good Oil Company Innormax LLC Irmler Rechtsanwälte LebensWohnArt Butler and Gatz CPAs, LLC THE HARCOURTS FOUNDATION (AUSTRALIA) PTY LTD AS Netz Meklas Group Concept Fasteners MTS Office ESSPEE GIOTTO - COMÉRCIO DE VESTUÁRIO, UNIPESSOAL, LDA Apparel P1 Technical Services ER of Dallas Redwood Lab Services NORTCON Grupo Rimet Taylor Made Hose Formax Credit UK Bronzino Engineering Direct Cleaning Services Semba CST Medicina do Trabalho Clear Start Accountants Lerch Bates Watex Solutions EG FrameOne DBT Druckluft Constantino Contabilidade E Comunicacao Brandao Grupo 2MGA Intermountain Shipmate SOVAC Moore Global Midway Ford Lake Cable Thayer Academy Academic Institutions HELPHONE Veal and Prasad Immobilienmakler in Oldenburg IMASA MRO SUPPORT, INC Flight Richard W. Fuller CPA Neighborhood Progress Fund Charity associations La Canastería Conklin Benham FORMA ESPACOS IMOBILIARIOS LTDA Ayers Mechanical Group Colares Linhares TTG Log SMYRNAPEDIATRICS APIQROO Local administrations Malkasian Accountancy SiComputer is a leader in the Italian information technology. Asbestos-Inspections-Solution-Management Just us lawyers CONTASS Artconta - Contabilidade e. Assistência Fiscal Csc Baixo Sul Assessoria e Consultoria Empresarial e Contabil LTDA Ellard-Willson Engineering Ltd General de Alimentos Nisa C.A. (GENICA) Zenex Print Globe COMPAGNIE REGIONALE D'ALIMENTS (COREAL) M Metzler \u0026 Associates T1486 Data Encrypted for Impact Name-and-shame extortion strategy T1488 Data Leak T1135 Network Share Discovery T1134.001 Access Token Manipulation: Token Impersonation/Theft T1562.001 Impair Defenses: Disable or Modify Tools T1027.002 Obfuscated Files or Information: Software Packing T1490 Inhibit System Recovery T1566 Phishing T1071.001 Application Layer Protocol: Web Protocols T1041 Exfiltration Over C2 Channel","permalink":"https://priv8t.com/ransomware/8base/","summary":"Overview Platforms: Windows · Microsoft Windows Variants: Phobos (customized version) · Phobos Extensions: .8base · .eight ATT\u0026CK software: SystemBC · AnyDesk · SmokeLoader · Fast.exe · Netscan Initial access: Phishing Top countries: US · …","title":"8Base"},{"content":"NightEagle APT-Q-95 Windows GhostContainer Neo-reGeorg rdp2tcp Microsoft Dev Tunnels ysoserial APT-C-78 CVE-2019-0708 CVE-2020-0688 GhostContainer delivery involving extracting cryptographic keys from ASP.NET configuration and overwriting VIEWSTATE framework parameters. T1133 External Remote Services T1505.003 Server Software Component: Web Shell T1071.001 Application Layer Protocol: Web Protocols T1572 Protocol Tunneling T1003.003 OS Credential Dumping: NTDS T1210 Exploitation of Remote Services T1190 Exploit Public-Facing Application T1053.005 Scheduled Task/Job T1055 Process Injection T1027 Obfuscated Files or Information T1070.001 Indicator Removal: Clear Windows Event Logs T1552.004 Unsecured Credentials: Private Keys T1083 File and Directory Discovery T1486 Data Encrypted for Impact T1090.003 Proxy: Multi-hop Proxy T1041 Exfiltration Over C2 Channel T1078 Valid Accounts T1003 OS Credential Dumping","permalink":"https://priv8t.com/ransomware/nighteagle/","summary":"Overview Malware / implants:GhostContainer ATT\u0026CK software:Neo-reGeorg · rdp2tcp · Microsoft Dev Tunnels · ysoserial Initial access:External Remote Services · Exploit Public-Facing Application · Valid Accounts Primary …","title":"NightEagle"},{"content":"Oldgremlin TinyScouts TinyCrypt decr1pt Ransomware Windows Linux .crypt TinyPosh TinyNode Cobalt Strike SOTRANS Russia Transportation \u0026 Logistics CVE-2020-3153 CVE-2020-3433 CVE-2018-19320 CVE-2018-19321 CVE-2018-19322 CVE-2018-19323 CVE-2019-16098 T1566.002 Phishing: Spearphishing Link T1204.002 User Execution: Malicious File T1071.001 Application Layer Protocol: Web Protocols T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/oldgremlin/","summary":"Overview Platforms: Windows · Linux Variants: TinyCrypt · decr1pt Extensions: .crypt ATT\u0026CK software: Cobalt Strike · TinyPosh · TinyNode Initial access: Phishing: Spearphishing Link Top countries: RU · BY Observed sectors: Banking · …","title":"Oldgremlin"},{"content":"VanHelsing RaaS VanHelsingRaaS vanhelsing vanlocker Windows Linux BSD ARM VMware ESXi .vanhelsing .vanlocker VanHelsing ransomware locker th30c0der caschile.cl CL Technology attorneykohm.com US Legal Services alertenterprise.com studiocdlvallone.it IT Architecture / Engineering compumedics.com.au AND neuromedicalsupplies.com AU Healthcare www.medsrx.com Atos-racks.com FR Manufacturing www.cityofbellville.com Government CVE-2023-36884 T1047 Windows Management Instrumentation T1053.005 Scheduled Task/Job: Scheduled Task T1059 Command and Scripting Interpreter T1543.003 Create or Modify System Process: Windows Service T1547.001 Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder T1574.002 Hijack Execution Flow: DLL Side-Loading T1486 Data Encrypted for Impact T1490 Inhibit System Recovery","permalink":"https://priv8t.com/ransomware/vanhelsing/","summary":"Overview Platforms: Windows · Linux · BSD · ARM · VMware ESXi Variants: vanhelsing · vanlocker Extensions: .vanhelsing · .vanlocker ATT\u0026CK software: VanHelsing ransomware locker Initial access: Not publicly confirmed Top countries: US · FR …","title":"VanHelsing"},{"content":"INC Ransom GOLD IONIC Tarnished Scorpion Ransomware-as-a-Service G1032 Lynx Vanilla Tempest OnSolve / CodeRED United States Technology McLaren Health Care Healthcare NHS Dumfries and Galloway United Kingdom Xerox Business Solutions (U.S.) Professional Services CVE-2023-3519 T1078 Valid Accounts T1190 Exploit Public-Facing Application T1566 Phishing T1021.001 Remote Desktop Protocol T1219 Remote Access Tools T1560.001 Archive via Utility T1074 Data Staged T1537 Transfer Data to Cloud Account T1047 Windows Management Instrumentation T1569.002 Service Execution T1570 Lateral Tool Transfer T1486 Data Encrypted for Impact T1685 Disable or Modify Tools T1070.004 File Deletion T1105 Ingress Tool Transfer T1036.005 Match Legitimate Resource Name or Location T1046 Network Service Discovery T1087.002 Domain Account T1069.002 Domain Groups T1135 Network Share Discovery T1657 Financial Theft","permalink":"https://priv8t.com/ransomware/incransom/","summary":"INC Ransom ransomware-as-a-service operation profile and activity overview.","title":"INC Ransom"},{"content":"Akira Akira_v2 Megazord Ransomware-as-a-Service G1024 Linux Nutanix AHV VMware ESXi Windows .akira .arika .powerranges AdFind LaZagne Mimikatz PsExec Rclone Gold Sahara Howling Scorpius Punk Spider Storm-1567 Hyper-V .akiranew .aki AnyDesk LogMeIn SharpDomainSpray GOLD SAHARA PUNK SPIDER Conti STAC5881 Scattered Spider Manders Blossomland Accounting Professional Services Bee Maid Honey Canada Southern California Telephone Company United States Energy \u0026 Utilities Lazyboyz Norway Pilot Precision Manufacturing AK Stamping Eagle Construction Construction George Cameron Nash Kyodo USA Brentwood Country Club Hospitality CreateASoft Technology Brent Electric United Kingdom Stransky Heiz-Mess-Regeltechnik GmbH Germany Worrell ScrubaDub Auto Wash Centers Retail \u0026 E-Commerce Algra Group Switzerland CVE-2024-40766 CVE-2023-20269 CVE-2020-3259 T1078 Valid Accounts T1133 External Remote Services T1021.001 Remote Desktop Protocol T1219 Remote Access Software T1059.001 PowerShell T1018 Remote System Discovery T1482 Domain Trust Discovery T1560.001 Archive via Utility T1567.002 Exfiltration to Cloud Storage T1562.001 Impair Defenses: Disable or Modify Tools T1558 Steal or Forge Kerberos Tickets T1490 Inhibit System Recovery T1486 Data Encrypted for Impact T1562.010 Impair Defenses: Downgrade Attack Vectors","permalink":"https://priv8t.com/ransomware/akira/","summary":"Ransomware-as-a-Service operation profile and activity overview.","title":"Akira"},{"content":"Chaos Ransomware-as-a-Service Windows Linux (advertised) VMware ESXi (advertised) NAS (advertised) .chaos Impacket (S0357) BlackSuit / Royal lineage Mankato Clinic United States Healthcare T1078 Valid Accounts T1598.004 Voice Phishing T1219 Remote Access Software T1059.001 PowerShell T1047 Windows Management Instrumentation T1135 Network Share Discovery T1567.002 Exfiltration Over Web Service T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/chaos/","summary":"Active ransomware-as-a-service and double-extortion operation profile.","title":"Chaos"},{"content":"Hunters International Ransomware-as-a-Service Water Ouroboros Hive CVE-2024-55591 T1059 Command and Scripting Interpreter T1078.002 Domain Accounts T1562.001 Impair Defenses T1497.003 Time Based Evasion T1057 Process Discovery T1135 Network Share Discovery T1021.002 SMB / Windows Admin Shares T1090.003 Multi-hop Proxy T1020 Automated Exfiltration T1490 Inhibit System Recovery T1489 Service Stop T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/hunters-international/","summary":"Inactive ransomware-as-a-service and data-extortion operation profile.","title":"Hunters International"},{"content":"Interlock Ransomware / Closed Group GOLD EMBRACE Hive0163 DaVita United States Healthcare Kettering Health CVE-2026-20131 T1189 Drive-by Compromise T1190 Exploit Public-Facing Application T1204.004 Malicious Copy and Paste T1059.001 PowerShell T1547.001 Registry Run Keys / Startup Folder T1056.001 Keylogging T1021.001 Remote Desktop Protocol T1219 Remote Access Software T1567.002 Exfiltration to Cloud Storage T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/interlock/","summary":"Active closed ransomware and double-extortion operation profile.","title":"Interlock"},{"content":"Lynx Ransomware-as-a-Service / Closed Affiliate Model INC Ransom successor Windows Linux VMware ESXi .lynx Cobalt Strike (S0154) Mimikatz (S0002) Rclone (S1040) INC Ransom TOXMAN cutlercapital US Wealth Management www.jerryleigh.com Apparel www.talbotdes.org GB Digital infrastructures www.someco.com Unknown www.eastersealsia.org Technology www.wolfconstruction.net Construction www.commonwealth-partners.com Finance bayareaherbs.com Agriculture \u0026 Food jacksoncountyin.com Local administrations st-annes.uk.com Schools lifelongaccess.org Human Services www.kurita.eu DE Manufacturing ossistemes.com ES Information Technologies Consulting csb-battery.com TW funkychunky.com Food and drinks businesses Stonehenge Real Estate / Real Estate Management cwwcontractors.com sentrydynamics.com ACNHealthcare IN Healthcare www.smithdollar.com Attorney njpcs.org indrub.com Keller Polska PL Africa Insurance ET Insurance services https://www.hegelmann.com Transportation \u0026 Logistics Altalingua Training Stera Chemicals RO Distribution Keylogistics Chile CL secure.ae AE gbaco.com Business Services powersmiller.com structuredassetservices.com Financial organizations La Rioja Alta www.trisa.ch CH Consumer Products peterboroughpublichealth.ca CA Public Health shorelinenyc.com www.roschvisionary.com Ocean Fish Grupo Ruiz Transport Options www.swautomation.at AT www.sje.vic.edu.au AU Universities www.granosycereales.com.co CO www.ville-dunkerque.fr FR www.blackdogsalvage.com Retail \u0026 E-Commerce crawfordorthodontics.net www.stcharlesprep.org www.mcphillamysgold.com Mining www.mscorp.net Maritime transport www.burdettedental.com www.tecnoelectric.com.py PY Energy \u0026 Utilities salcom.com FI Telecommunications swdc.wa laurysenkitchens.com wildbunchdistribution.com kiddsservices.com hartford.fr groupecho.com miltonfl.org www.braemac.com madisonareaymca.org CSA Tax \u0026 Advisory https://www.ckm-montagen.de/en/ ruskcountywi.us Government and administrations https://www.omnibusjp.com JP Entertainment industry ccedarvalleyservices.org Services www.fecrwy.com terport.com.py L.O. Trading www.ktlgroup.com www.advancedentdenver.com www.eliteflower.com www.toc.co.jp Trucash sspinnovations.com vanteceurope.com classiccenter.com nationalcoatingsinc.com Navigator Business Solutions simmerscrane.com Professional Services ozsoft.com.au marquscompanies.com trailridgeenergy www.dekalbcountyga.gov www.ccls.org Non-Governmental Organizations (NGOs) saacke.com www.cbsaust.org.au americanhome TriMed Inc. HSIC TriMed Inc. (Henry Schein) Pharmacy and drugs manufacturing suratisweetmart.com Dodd-group-ltd pactchangeslives.com Charity associations lwginc.net VIR High-tech www.margaritavilleatsea.com Travel and tourism industry www.independentpaperboard.com CAS EXhibition Partners olarra IT Encore Leisure Group Hotel Ben-Mor Inc. Bounds Gillespie Killebrew Tushek Architects Architecture / Engineering rose-acre-farms-inc www.sixgunsllc.com Oil www.simmonsboardman.com Media \u0026 Entertainment elektro-buder.at Electricity www.ziegler-design.de firstlight.net denraytire.com www.medwayplastics.com highdoc.de pesadoconstruction www.onahotels.com Hospitality www.primax.com PE bemac-merivale Automotive volanno.com city-of-batavia www.metrotech.edu www.dimarcogroup.com oakland-museum-of-california Culture BÜCHNER BARELLA Holding Sterlings Accountancy Solutions Hanson Chambers Legal Services Bizcom Electronics abfe SG HK Hardware \u0026 Engineering HK True World Group LLC Drive \u0026 Shine Admiral Gaming Network cibraco BR Frontline Bioenergy gid-it.de www.pefco.com Lincoln Law Tooling Systems Group ci-Fabrics premiersurfacesinc Morrow Equipment salamanderresort.com Sports https://eagleonline.net/ Nippn TH iBUYPOWER RICHARD MILLE ASIA PTE. LTD \u0026 D'LEAGUE PTE. LTD. Inside One AR Victoria Garden Adrian Kenya KE Greta Group Nactarome nactarome.eu Confartigianato Imprese The Providence Warwick Convention Lodging industry ITACCESS PTE. LTD. Woodtect TH hubermanlaw.co.il IL motorsport-de-la-capitale lurie-glass Inflite Engineering Services Avionics gouverneur.com Telcom Insurance Group Levinzon CPA Consulting siamgas and petrochemicals public company ltd accountant falavinha.local frazierbowles.com Biogest Renewable energies Frazier \u0026 Bowles quenotedeporten MX lgipr PR Best Profil MA Human Resources GRECA Asfaltos (grupogreca.com.br) Davies, Mcfarland \u0026 Carroll university of chile yahtec Diyar SA Wilkie Sanderson Chrisman Commercial Rousseau kosmas.cz CZ Runtec Gearhiser Peters Elliott \u0026 Cannon Legislative branch (parliamentary chambers) diyar.com Maruichi Leavitt Pipe \u0026 Tube Royal Chemical Hire Velocity (lan.hirevelocity.com) CabinC.com runtec.co.jp derichsukonertz.de David Mills CPA, LLC southernagllc.com Penn Emblem (penn.local) WDEF-TV shgcpa.com corporateflight.com Flight impactcanada.com buildingmaterialspecialties.com friscochamber.com greatplainstransport.com Road transport pay4freight.com end2endtechnologies Vicarage Court Solicitors Farmo Res Springer \u0026 Steinberg amethystgroup.co.uk R\u0026N Manufacturing dhsmithco.com Sally B Gold Feldman \u0026 Lopez Hyalogic McElwee Firm Astra Products Lake HVAC nevadareadymix.com toolsign.com spscompanies.com bilbie.com.au Restaurant Associates JM Colmar Industrial Supplies gramoll.com Alton Steel Pacific Residential Mortgage Amatech Solar Optimum solaroptimum.com Martin Mechanical (martin.local) AJF Inspections \u0026 Engineering () Commercial Concrete Systems amatechinc.com Direct Traffic Control Doumen Palomino Petroleum AMICIO Fulcrum Lifting Tryon Indiv Usa Harrells.com fstlogistics.com Springfield Water and Sewer Commission Utility Longue Vue Club ciscientific.com.au Shops ACTi Corporation Tech NH lofotenseafood.com NO ACDC Express ZA Tugwell Pump \u0026 Supply Dynamic Closures Adval Tech Pervedant PT Schmiedetechnik Plettenberg GmbH \u0026 Co KG Seabank Group MT La Unión Engineering Mechanics CN Biogena GmbH \u0026 Co KG Healthcare research powelltool.com ITU AbsorbTech PPS Services Group Vvf Ilinois Services GANRO acmefan.com pacresmortgage.com Xepa Soul Geokon Planet One IDEA Expertises Stürmer Maschinen stuermer-maschinen.de Excel Security planetone-asia.com (kc2) geokon.com Fortune Electric Co Ltd Ranhill Bersekutu MY ranhillbersekutu.com.my hamton SE Hisingstads Bleck Leadership Strategies Autoschade Pippel NL Pedensia Graphics Distribution Winbas LINTEC \u0026 LINNHOFF Holdings HRS_IDEA_Expertises Allied Tenesis Empire Home Center (M)Empire-home-center Societatea Energetica Electrica S.A. The Brown \u0026 Hurley Group Atlas Commodities Marshall Motor Holdings Lexington Electric Shinsung Delta Tech KR Banfi Vintners Zamzow's Wireless Solutions (Morris.Domain) Silverado Contractors Engine Power Source Jalaram Produce KPI Engineering Scott Engineering Tri-Sen Systems The Wendt Agency Rossi Real Estate (ROSSIDG.LOCAL) Delta Screen \u0026 Filtration () Strategic Materials sce.org.sg Alo Center (hq.aloteknik.se) Jacobs \u0026 Thompson Mintz Law Firm, LLC Gossett Motor Cars Marukai Sentinel Systems Angotti \u0026 Reilly Clutch Industries Kassin \u0026 Carrow Access Capital Partners SA Lowe Engineers Woodport Doors communisis.com \u0026 paragon.world WPD.WOODPORTDOORS.COM QualiTech (qualitech.com) Kinseth Hospitality Companies Douglas County, GA (DDCWSA.COM) SERGAS Group Gas Browdy (bl.local) PHG CPAs (bushman.biz) Nash Brothers Construction (nashdom.local) Novati Constructions Conad (conad.lan) Delap \u0026 Waller Jim Thompson Astaphans DM jimthompson.com astaphans.com u0 Excel Transportation D-7 Roofing Hunter Taubman Fischer \u0026 Li Amourgis \u0026 Associates Farrar \u0026 Ball Banner Day Camp Culture and entertainment Smith Tank \u0026 Steel (smith-tank.com) CM Buck \u0026 Associates Talascend Goins Law Gills Onions GBC NSK Group ROTA Hydra-Matic Packing Equity \u0026 Advisory Hosting.co.uk Textiles Coated International New Age Micro Inland Tarp \u0026 Liner Mmaynewagemicro Wisconsin Lifting Specialists GMG SCM GROUP Everything Breaks Keable \u0026 Brown TOC BeClever Extra BE Hypertype Suneva Medical Suneva Medical(sunevamedical.com) Grupo_Trisan CR Mark Thomas Banco de Fomento Internacional VE Banking institutions TaxPros of Clermont DSZ Future Metals Plowman Craven Siltech (siltechcorp.local) WimCoCorp NEBRASKALAND dzsi.com futuremetals.com plowmancraven.co.uk Interoute agency LmayInteroute agency Model Die \u0026 Mold Triverus ValueMax Group Precision Electrical Systems Denkali LifeMine lifeminetx.com Tricon Energy Marketing Funlab Tankstar FUN-LAB tankstar.com Sit \u0026 Sleep Blain Supply English Construction Company triverus.com Cruz Marine (cruz.local) Ascend Analytics (ascendanalytics.com) Arbitech (arb.local) idom.com Tranter (tcn.local) Riverside Resort Hotel and Casino Gortemoller Engineering (gorteng.local) tcn.local KidKraft Myelec Electrical Wallace Construction Specialties (wcs.local)) Bay Sales (cog.local) PBS group MacEwen Petroleum kidkraft.com Rushlift (lks.net) Innoquest Warwick Hotels and Resorts Alvan Blanch Development Concut (ddm.local) Miller Boskus Lack Architects (ad.mbl-arch.com) Johnson Laschober \u0026 Associates Cambria Automobiles (summitgroup.local) Pyle Group Reef-PCG (pcg.local) The Greenhouse People True Blue Environmental CVE-2026-24858 T1078 Valid Accounts T1053.005 Scheduled Task T1562.001 Impair Defenses T1021.001 Remote Desktop Protocol T1135 Network Share Discovery T1490 Inhibit System Recovery","permalink":"https://priv8t.com/ransomware/lynx/","summary":"Active ransomware-as-a-service and double-extortion operation profile.","title":"Lynx"},{"content":"Qilin Agenda Ransomware-as-a-Service S1242 Windows Linux VMware ESXi .qilin Spikey Scorpius Water Galura Gold Feather Phantom Mantis Moonstone Sleet ArmCorp Alicotrans Transportation \u0026 Logistics Gilco Scaffolding Construction CARIDRO VAL DE LOIRE France Professional Services Imperial Healthcare Solutions United States Healthcare Mitsuwa Trading Co., Ltd Japan Retail \u0026 E-Commerce Jet Specialty Manufacturing Alaska Electrical Apprenticeship Education Partners Group SK Slovakia Financial Services JBC Spain Philippine Ports Authority Philippines Bauman Law Group Jouvet SAS G\u0026S Technologies Technology The Big Table United Kingdom Hospitality Commission de la construction du Québec Canada Government Tanner Chile Other Uşak University Turkey CVE-2024-21762 CVE-2023-27532 T1190 Exploit Public-Facing Application T1566.001 Spearphishing Attachment T1566.002 Spearphishing Link T1059.001 PowerShell T1003.001 LSASS Memory T1021.002 SMB/Windows Admin Shares T1021.004 SSH T1562.001 Disable or Modify Tools: Impair Defenses T1490 Inhibit System Recovery T1489 Service Stop T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/qilin/","summary":"Ransomware-as-a-Service operation profile and activity overview.","title":"Qilin"},{"content":"Rhysida Ransomware / Private RaaS Windows encryptor Linux/ESXi encryptor Windows Linux VMware ESXi .rhysida PsExec (S0029) Impacket (S0357) Squeaking Scorpius GOLD VICTOR Berlin state administration Germany Government American Addiction Centers United States Healthcare Port of Seattle Transportation \u0026 Logistics City of Columbus MarineMax Retail \u0026 E-Commerce Ann \u0026 Robert H. Lurie Children's Hospital of Chicago Insomniac Games Technology World Council of Churches / Lutheran World Federation Switzerland Non-Profit King Edward VII's Hospital United Kingdom British Library Education Prospect Medical Holdings Prince George's County Public Schools University of the West of Scotland CVE-2020-1472 T1078 Valid Accounts T1190 Exploit Public-Facing Application T1566 Phishing T1059.001 PowerShell T1021.001 Remote Desktop Protocol T1021.004 SSH T1003.003 NTDS T1219 Remote Access Software T1070.001 Clear Windows Event Logs T1055.002 Portable Executable Injection T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/rhysida/","summary":"Active private ransomware-as-a-service and double-extortion operation profile.","title":"Rhysida"},{"content":"SafePay Ransomware / Closed Group Windows .safepay PsExec (S0029) Rclone (S1040) GOLD LEAPFROG Ingram Micro US Technology T1133 External Remote Services T1021.001 Remote Desktop Protocol T1548.002 Bypass User Account Control T1135 Network Share Discovery T1560.001 Archive via Utility T1562.001 Impair Defenses T1070.001 Clear Windows Event Logs T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/safepay/","summary":"Active centrally operated ransomware and double-extortion group profile.","title":"SafePay"},{"content":"World Leaks Data Extortion / Affiliate Operation Windows Linux Hunters International Dell Technologies United States Technology Tata Electronics India Reliance Group IN Architecture / Engineering Chain IQ CH Professional Services T1020 Automated Exfiltration","permalink":"https://priv8t.com/ransomware/world-leaks/","summary":"Data-extortion operation and successor to Hunters International.","title":"World Leaks"},{"content":"ALPHV / BlackCat Noberus Ransomware-as-a-Service ALPHV BlackCat Linux Windows BlackCat (S1068) Scattered Spider Storm-0501 Change Healthcare - Optum - UnitedHealth ipmaltamira Ewig Usa SBM \u0026 Co Petrus Resources Ltd Kumagai Gumi Group Allan Berger \u0026 Associates verbraucherzentrale hessen Electro Marteix Angeles Medical Centers CVE-2021-27876 CVE-2021-27877 CVE-2021-27878 T1598 Phishing for Information T1586 Compromise Accounts T1219 Remote Access Software T1557 Adversary-in-the-Middle T1136 Create Account T1572 Protocol Tunneling T1562.001 Impair Defenses T1567 Exfiltration Over Web Service T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/alphv/","summary":"Former ransomware-as-a-service operation and affiliate ecosystem profile.","title":"ALPHV / BlackCat"},{"content":"Avaddon Ransomware-as-a-Service Windows AXA Asia Assistance Multiple Insurance T1059.007 JavaScript T1548.002 Bypass User Account Control T1547.001 Registry Run Keys / Startup Folder T1135 Network Share Discovery T1490 Inhibit System Recovery T1489 Service Stop T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/avaddon/","summary":"Former ransomware-as-a-service and multi-extortion operation profile.","title":"Avaddon"},{"content":"Babuk Babyk Babuk Locker Ransomware-as-a-Service Vasa Locker Windows Linux Mikhail Matveev Metropolitan Police Department of the District of Columbia United States Government T1059.003 Windows Command Shell T1685 Disable or Modify Tools T1057 Process Discovery T1135 Network Share Discovery T1489 Service Stop T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/babuk/","summary":"Former ransomware-as-a-service operation and source-code ecosystem profile.","title":"Babuk"},{"content":"Black Basta Ransomware-as-a-Service Windows ESXi Storm-1811 Conti CVE-2024-1709 T1667 Email Bombing T1585.003 Establish Accounts: Cloud Accounts T1059.001 PowerShell T1059.003 Windows Command Shell T1074.001 Local Data Staging T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol T1490 Inhibit System Recovery T1688 Safe Mode Boot T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/black-basta/","summary":"Former ransomware-as-a-service operation and affiliate ecosystem profile.","title":"Black Basta"},{"content":"BlackMatter Ransomware-as-a-Service ELBRUS DEV-0504 NEW Cooperative United States Agriculture \u0026 Food T1018 Remote System Discovery T1057 Process Discovery T1007 System Service Discovery T1021.002 SMB/Windows Admin Shares T1567 Exfiltration Over Web Service T1486 Data Encrypted for Impact T1561 Disk Wipe","permalink":"https://priv8t.com/ransomware/blackmatter/","summary":"Former ransomware-as-a-service operation and affiliate ecosystem profile.","title":"BlackMatter"},{"content":"Cl0p Clop CL0P Ransomware / Data Extortion Windows .clop TA505 FIN11 CVE-2023-34362 CVE-2023-0669 CVE-2024-55956 CVE-2025-61882 CVE-2025-61884 T1190 Exploit Public-Facing Application T1059.003 Windows Command Shell T1218.007 Msiexec T1614.001 System Language Discovery T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/clop/","summary":"Ransomware and data-extortion operation profile.","title":"Cl0p"},{"content":"Conti Ransomware-as-a-Service S0575 Windows .CONTI TrickBot, Ryuk, Conti, Bazar, Emotet, Cobalt Strike, Empire, LaZagne, Mimikatz, Diavol, GrimAgent TrickBot, IcedID, Cobalt Strike, Rclone, Mimikatz, Router Scan Cobalt Strike PowerShell BazarLoader Mimikatz Rclone loader Conti ransomware Conti (S0575) Wizard Spider Health Service Executive Ireland Healthcare Alliance Steel Elevate Services Azimut Benetti Group IT Maritime transport LCRD MJH Life Sciences PFC USA The Contact Company Central Restaurant Products Schaumburg Park District RateGain Pianca Midea Carrier Imenco AS Royal Brunei Airlines Sdn Bhd Critical Content Automobil Holding AS Concepts in Millwork Eurofred Agile Sourcing Partners Alimentos y Frutos S.A. Worksoft Allcat Claims Service Omicron Consulting S.r.L Information Technologies Consulting FOR BlackCat and LockBit advert For Costa Rica and US terrorists (Biden and his administration) Cjk Group, Inc. EYP LARON an otp industrial solutions company Attica Holdings S.A. For Peru Elgin_Ca Jasec Managed Business Solutions Attica Group Instituto Meteorológico Nacional and racsa.go.cr Services GIBSON HomeWares Del Sol panasonic Milan Institute For Costa Rica Centris Barwick Bathroom Distribution LLP Nordex SE Lowell Ministerio de Hacienda - República de Costa Rica Parker Appliance Company Wocklum Group [IMPORTANT ANNOUNCEMENT!] Eminox Woningcorporatie ZAYAZ MARTINELLI GINETTO Manufacturing Ackerman Plumbing Big Horn Plastering of Colorado, Inc. Newlat Food SPA Food and drinks businesses BANQUE CENTRALE DE TUNISIE TIC International Corporation CJ Pony Parts Prima Sole Components Spa Scott Manufacturing, LLC US AB Karl Hedin Aluminerie Alouette Great HealthWorks TST Logistics Myron Corp. Fuchs North America Loepthien Maeder Treuhand AG Fujioka Eletro Imagem SA EUROPA GROUP Cummins-Wagner Lifetech Resources Prima Power A.J. Rose Gleason Corporation Caledonian United McGill Corporation Get Fresh Company GRUPPO ANGELANTONI Sport Vision Buhck Gruppe HOL-MAC Corp. University of Neuchâtel HF Group IDEAL Fensterbau Research Partnership WARNING The Spine Diagnostic Colli del Soligo Agriculture \u0026 Food JOB AG KRACHT GmbH Primex Manufacturing Inc Midas Pharma GmbH Apollo Schultze and Braun Tudi Mechanical Systems (TMS) RAMSAUER Mack Defense, LLC CSI Laboratories GEE GROUP INC. Ciam SPA Automotive Muehlhan iTCo Solutions Ltd Ebix Inc. Aareon Nederland B.V. HelmsBriscoe New World Development Company Limited (NWD) Vrancor Group Rheinland-Pfalz Bank The Lovett Group SEA-invest Zamil Industrial NZ UNIFORMS Athens Distributing Company KP SNACKS MSH Steuerberatungsgesellschaft Bank of Indonesia PLACON Shutterfly inc. RRD Safeguard Lyon-Waugh Auto Group Perennials Fabrics Acuity Brands Arcese Transport DURA | Innovation Driven by Inspiration Iwis Group American Dream Mount Franklin Foods, LLC The Technord industrial group iGuzzini Group Charles Kendall Arbor Contract Carpet Inc. Metamorph Group RKPT ENVASES GROUP Bernd Siegmund GmbH Bay and Bay Transportation Holiday Builders McMenamins CASINO WINNAVEGAS Entertainment industry The Briad Group DEWEtech WEBER_OTT AG Amoria Bond TALIS GROUP Chantelle Group Nordic Choice Hotels MEETH DOMICIM Agence Comerio Ercole spa COMUNE DI TORINO Local administrations LAVI Clementoni Retail \u0026 E-Commerce MST LAWYERS HOULE Spencer Gifts LLC NLB Corporation KISTERS FRONTIER SOFTWARE Burda Sanitärtechnik SIRCHIE Epple Druckfarben San Carlo DUNMORE Acne Studios jadecorp DKS  Deutsch Kerrigan LLP Not Yet Kameraden! HELSA Group International FTI Group General RV Center JAFTEX Corporation HARTMANN FINANCIAL ADVISORS LLC Marymount Manhattan College LOGROS S.A. Aisha Steel-ASML COMMUNAUTÉ DE COMMUNES PAYS D’APT LUBERON VISTRA Orgill, Inc. Cogan Wire and Metal Products Ltd Axiсorp GMBH Axio Greymouse VA PTY Ltd EQUITY Bank Electra Link Hutt ONTEC Automation ARGOS CONNECT ENERGY JEAN FLOC’H TRINA SOLAR MEYER CORPORATION DALLOYAU INDIAN CREEK HUDSON BROTHERS Construction Company VIENNA INSURANCE GROUP PORTALP Agricorp Company STAR REFRIGERATION LIMITED lkma EZ Loader Bochane Groep MUTUAL MATERIALS THE METRO GROUP, INC. M3 Inc. Announcement ARM CHINA Graff Diamonds - Announcement socage benefitexpress Southland Holdings Finite Recruitment Power Plumbing Acorn Stairlifts Perrin ILLUM Major Wire Industries Los Gatos Tomato Products Marketing Alliance Group Medical Healthcare Solutions, Inc Ideal Living Pfertner GmbH Immobilienverwaltung SAN CARLO GRUPPO ALIMENTARE SPA Distribution Barnes Professional Eye Care Enviroplas SPF Precut Lumber Obeikan Investment Group Artsana Porto Seguro Grupo Alter Ideal Printers DCI, Inc. Sykes Cottages Beedie Schimberg Co. Vaughn Industries Reliable Parts Albireo Energy Announcement. ReviLives. The National Math and Science Initiative Glenbrook Automotive Group Creative Extruded Products JVCKenwood TH Nakisa Galloway Research Service Marketing EXAIR Graff Diamonds SEIU Local 888 Real Time Consultants, Inc Crowder Construction Company Berexco LLC wenco S. A. Align Technology JVCKenwood Case Gershman Mortgage DataXsport Grupo GSS TaxLeaf Corporate Minjar Gold parcoinc WEST TREE SERVICE RTI Surgical Cedar Grove Composting Vera Wang Group Jakes Finer Foods IJmond Werkt IN2 Engineering PeakLogix Office Star Products Real Time BÖWE SYSTEC Marans Weisz \u0026 Newman, LLC PowerGrid Services NASCO Industries aathonrton Pines Ford Lincoln AMAX ASSU 2000 Grupo Herdez, S.A.B. de C.V. Holding Companies Frank G. Love Envelopes, Inc. JAMAC FROZEN FOODS MOSS BROS GROUP Riwega S.R.L. RPE CONTRACTING Sanger \u0026 Altgelt Insurance Agents TURLA SRL High-tech Vendrig Holding B.V. world-electronics Milwaukee World Festival, Inc completeportables DEBTIN CONSULTANTS (PTY) LTD Bob Poynter VIVEA Duke Manufacturing Co. Hanwha Life Vietnam Unknown SOLWARE CVE-2020-1472 CVE-2021-34527 CVE-2017-0144 CVE-2021-44228 CVE-2018-13379 CVE-2018-13374 CVE-2020-0796 CVE-2020-0609 CVE-2020-0688 CVE-2021-21972 CVE-2021-21985 CVE-2021-22005 CVE-2021-26855 CVE-2020-0787 CVE-2021-41379 CVE-2021-36934 CVE-2021-42287 CVE-2021-42278 T1566.001 T1190 T1059.003 T1106 T1140 T1027 T1055.001 T1083 T1135 T1057 T1016 T1049 T1021.002 T1080 T1486 T1490 T1489 T1562.001 T1003.003 T1482 T1018 T1567.002 T1078 Valid Accounts T1566.002 Spearphishing Link","permalink":"https://priv8t.com/ransomware/conti/","summary":"Former ransomware-as-a-service operation and cybercrime ecosystem profile.","title":"Conti"},{"content":"DarkSide Ransomware-as-a-Service FIN7 / ELBRUS DEV-0289 Colonial Pipeline United States Energy \u0026 Utilities T1566 Phishing T1190 Exploit Public-Facing Application T1133 External Remote Services T1021.001 Remote Desktop Protocol T1090.003 Multi-hop Proxy T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/darkside/","summary":"Former ransomware-as-a-service operation profile.","title":"DarkSide"},{"content":"DragonForce LockBit-derived Conti-derived Ransomware-as-a-Service Linux NAS VMware ESXi Windows .dragonforce_encrypted Cobalt Strike Chisel Mimikatz PsExec SystemBC GOLD HARVEST / Scattered Spider RansomHub Medical Department Store rubbermill.com Homewood Sales Norwood Law Firm Frato Criba Brookview Financial Wozair Hogan Omidi P.C. R \u0026 D Machine and Engineering CVE-2025-5777 CVE-2021-44228 CVE-2023-46805 CVE-2024-21412 CVE-2024-21887 CVE-2024-21893 CVE-2024-57727 CVE-2024-57728 CVE-2024-57726 T1190 Exploit Public-Facing Application T1078 Valid Accounts T1136.001 Create Account: Local Account T1219 Remote Access Software T1021.001 Remote Desktop Protocol T1569.002 Service Execution T1003 OS Credential Dumping T1486 Data Encrypted for Impact T1567.002 Exfiltration to Cloud Storage T1566 Phishing T1133 External Remote Services","permalink":"https://priv8t.com/ransomware/dragonforce/","summary":"Ransomware-as-a-Service operation and affiliate ecosystem profile.","title":"DragonForce"},{"content":"Egregor Ransomware-as-a-Service Windows Maze-linked operators Crytek Germany Technology T1197 BITS Jobs T1059.001 PowerShell T1484.001 Group Policy Modification T1055 Process Injection T1071.001 Web Protocols T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/egregor/","summary":"Disrupted ransomware-as-a-service operation and double-extortion ecosystem profile.","title":"Egregor"},{"content":"GandCrab Ransomware-as-a-Service PINCHY SPIDER T1078 Valid Accounts T1021.001 Remote Desktop Protocol T1562.001 Impair Defenses T1189 Drive-by Compromise T1566.001 Spearphishing Attachment T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/gandcrab/","summary":"Former ransomware-as-a-service operation and affiliate ecosystem profile.","title":"GandCrab"},{"content":"Hive Ransomware-as-a-Service Mikhail Matveev Newfoundland and Labrador Health Care System Canada Healthcare CVE-2020-12812 CVE-2021-31207 CVE-2021-34473 CVE-2021-34523 T1133 External Remote Services T1190 Exploit Public-Facing Application T1566.001 Spearphishing Attachment T1059 Command and Scripting Interpreter T1490 Inhibit System Recovery T1070 Indicator Removal T1112 Modify Registry","permalink":"https://priv8t.com/ransomware/hive/","summary":"Disrupted ransomware-as-a-service operation and affiliate ecosystem profile.","title":"Hive"},{"content":"LockBit Ransomware-as-a-Service S1202 ABCD LockBit 2.0 LockBit 3.0 LockBit Black LockBit Green LockBit Red Windows Linux macOS ESXi .abcd .lockbit StealBit Angler Pikabot Dmitry Yuryevich Khoroshev (LockBitSupp) Mikhail Vasiliev Ruslan Astamirov Itaguaí Construções Navais (ICN) BR Manufacturing Verbandsgemeinde Rhein-Nahe DE Government Hanover Police Department US Grey High School ZA Education Graphique de France Crystal D AC Investment Management, LLC Financial Services OYO Hotel \u0026 Casinos Las Vegas Topackt IT Solutions GmbH Technology Equinox Healthcare Evolve Bank \u0026 Trust Saint Anthony Hospital Taiwan Semiconductor Manufacturing Company TW CVE-2018-13379 CVE-2023-3519 CVE-2023-4966 T1190 Exploit Public-Facing Application T1078 Valid Accounts T1133 External Remote Services T1059.003 Windows Command Shell T1484.001 Group Policy Modification T1003.001 LSASS Memory T1562.001 Impair Defenses: Disable or Modify Tools T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/lockbit/","summary":"Ransomware-as-a-Service operation profile and historical activity overview.","title":"LockBit"},{"content":"Maze ChaCha Ransomware Windows TWISTED SPIDER Cognizant United States Technology T1078 Valid Accounts T1133 External Remote Services T1059.001 PowerShell T1003 OS Credential Dumping T1018 Remote System Discovery T1071.001 Web Protocols T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/maze/","summary":"Former ransomware operation and double-extortion ecosystem profile.","title":"Maze"},{"content":"Medusa Ransomware-as-a-Service .medusa Medusa Ransomware (S1244) Mimikatz PsExec Rclone certutil Spearwing University of Mississippi Medical Center United States Healthcare CVE-2024-1709 CVE-2023-48788 CVE-2025-10035 CVE-2025-31324 T1190 Exploit Public-Facing Application T1059.001 PowerShell T1003.001 LSASS Memory T1021.001 Remote Desktop Protocol T1567.002 Exfiltration to Cloud Storage T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/medusa/","summary":"Active ransomware-as-a-service and double-extortion operation profile.","title":"Medusa"},{"content":"Play Playcrypt Ransomware / Closed Group Windows Linux .play AdFind Cobalt Strike SystemBC GootLoader Mimikatz Sys-kool United States Non-Profit Grunthal Welding \u0026 Supplies Canada Manufacturing Red Star Oil Energy \u0026 Utilities GT Distributors Retail \u0026 E-Commerce MEQ Meteor Group Germany Other KRC Machine Tool Solutions Figgins Family Wine Estates Agriculture \u0026 Food Latoplast Be Media Media \u0026 Entertainment Coltrane Systems Woodhaven Association Marconi Industrial Services Italy MIE Solutions Rilpa Enterprises Signature Services GCATS Investments Financial Services CVE-2022-41080 CVE-2024-57727 CVE-2025-29824 T1078 Valid Accounts T1190 Exploit Public-Facing Application T1059.001 PowerShell T1562.001 Impair Defenses T1560.001 Archive via Utility T1486 Data Encrypted for Impact T1021.001 Remote Desktop Protocol T1083 File and Directory Discovery","permalink":"https://priv8t.com/ransomware/play/","summary":"Active ransomware and double-extortion operation profile.","title":"Play"},{"content":"Ragnar Locker Ransomware Windows VIKING SPIDER Capcom Japan Media \u0026 Entertainment T1059.003 Windows Command Shell T1543.003 Windows Service T1569.002 Service Execution T1564.006 Run Virtual Instance T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/ragnar-locker/","summary":"Disrupted ransomware operation and extortion ecosystem profile.","title":"Ragnar Locker"},{"content":"RansomHub Ransomware-as-a-Service Windows Linux VMware ESXi FreeBSD Knight / Cyclops CVE-2023-3519 T1566 Phishing T1190 Exploit Public-Facing Application T1110.003 Password Spraying T1059.001 PowerShell T1021.002 SMB/Windows Admin Shares T1490 Inhibit System Recovery T1489 Service Stop T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/ransomhub/","summary":"Former ransomware-as-a-service and double-extortion operation profile.","title":"RansomHub"},{"content":"REvil / Sodinokibi Sodinokibi Sodin Ransomware-as-a-Service REvil Windows GOLD SOUTHFIELD / Pinchy Spider Yaroslav Vasinskyi (Rabotnik) Kaseya United States Technology CVE-2018-8453 CVE-2019-2725 CVE-2019-11510 T1566.001 Spearphishing Attachment T1059.001 PowerShell T1082 System Information Discovery T1083 File and Directory Discovery T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/revil/","summary":"Disrupted ransomware-as-a-service operation and affiliate ecosystem profile.","title":"REvil / Sodinokibi"},{"content":"Ryuk Ransomware Windows .RYK WIZARD SPIDER Servicio Público de Empleo Estatal (SEPE) Spain Government T1078.002 Domain Accounts T1021.002 SMB/Windows Admin Shares T1053.005 Scheduled Task T1489 Service Stop T1490 Inhibit System Recovery T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/ryuk/","summary":"Former enterprise ransomware operation profile.","title":"Ryuk"},{"content":"Priv8t is an independent cybersecurity research project and is not affiliated with the ransomware groups, threat actors, vendors or organizations referenced in its research.\nWe collect and analyze publicly available information about ransomware groups, infrastructure, tactics, vulnerabilities and victims.\nRansomware operations are classified as:\nACTIVE — currently operational.\nINACTIVE — activity or the public operation has ceased.\nDISRUPTED — materially disrupted by law enforcement or infrastructure intervention.\nUNKNOWN — insufficient information to determine current status.\nLe secret des grandes fortunes sans cause apparente est un crime oublié, parce qu’il a été proprement fait.\nH. de Balssa ","permalink":"https://priv8t.com/about/","summary":"Priv8t is an independent cybersecurity research project and is not affiliated with the ransomware groups, threat actors, vendors or organizations referenced in its research.\nWe collect and analyze publicly available information about …","title":""},{"content":"Cactus Ransomware Windows .cts .cts0 .cts1 .cts2 Cobalt Strike Chisel BackConnect ToyMaker UNC2198 ASSA ABLOY Sweden Manufacturing KYB Corporation Automotive Urban One United States Media \u0026 Entertainment Tempel Steel Company CHF Industries Quigley Eye Specialists Healthcare American International Industries Consumer Products Forman Mills Retail \u0026 E-Commerce Amalgamated Sugar Company Agriculture \u0026 Food Pace Logistics Transportation \u0026 Logistics Steel Warehouse Caltrol Professional Services Grede Associated Asset Management Construction ElectroCraft Almost Famous Clothing Everel Group Italy Technology CVE-2023-41265 CVE-2023-41266 CVE-2023-48365 T1190 Exploit Public-Facing Application T1059.001 Command and Scripting Interpreter: PowerShell T1027 Obfuscated Files or Information T1562.001 Impair Defenses: Disable or Modify Tools T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/cactus/","summary":"Overview Platforms: Windows Variants: — Extensions: .cts · .cts0 · .cts1 · .cts2 ATT\u0026CK software: Cobalt Strike · Chisel · BackConnect Initial access: Exploit Public-Facing Application Top countries: — Observed sectors: Manufacturing · …","title":"Cactus"},{"content":"Kairos Kairos V2 Data Extortion Qilin Lynx SafePay INC Ransom Leisure Coast Kitchens Australia Retail \u0026 E-Commerce Ville de Libercourt France Government Ayuntamiento de Velilla de San Antonio Spain Hightech Signs United States Manufacturing Warwick Fabrics New Zealand Thermalex Inc LR Reed Professional Services College O'Sullivan de Québec Canada Education Mortensen Law Offices Commune de Camiers McCarthy Inc Arwini Germany Gregory Jewellers Nordenta Denmark Healthcare Strata Republic FriendlyCare Pharmacy T1078 Valid Accounts T1190 Exploit Public-Facing Application","permalink":"https://priv8t.com/ransomware/kairos/","summary":"Overview Platforms: — Variants: Kairos V2 Extensions: — ATT\u0026CK software: — Initial access: Valid Accounts Top countries: US · AU · GB · CA · FR Observed sectors: Professional Services · Healthcare · Education · Government \u0026amp; Defense · …","title":"Kairos"},{"content":"-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEanrs4RYJKwYBBAHaRw8BAQdAZEG52z/jS1TpGr1azPgArWJ6yaicAohKgsjB S7S/CBi0MEFsZXggRG9taW5nbyAoQ1RJIGtleSkgPEFsZXhfRG9taW5nbzdAcHJv dG9uLm1lPoivBBMWCgBXFiEELoOiRimr1cKFV6C9jsKY/PB1SiUFAmp67OEbFIAA AAAABAAObWFudTIsMi41KzEuMTIsMCwzAhsDBQsJCAcCAiICBhUKCQgLAgQWAgMB Ah4HAheAAAoJEI7CmPzwdUolp6EA/jcGM/D9PD6LK0MG0KprgboCiZYFlbxi97We dcOU6RoNAQC+U5bGGsPrYoYEOMIjbFCfXvcIDzNtipyVQZ8kMiwUCrg4BGp67OES CisGAQQBl1UBBQEBB0Dh6gzx6TGUIkHerp9XWR5nQ0OC7IpC87UzeRbiCL75TQMB CAeIlAQYFgoAPBYhBC6DokYpq9XChVegvY7CmPzwdUolBQJqeuzhGxSAAAAAAAQA Dm1hbnUyLDIuNSsxLjEyLDAsMwIbDAAKCRCOwpj88HVKJR0XAP0cgAmqNobDDNzL J4g+f54KikQ7PDKO2ZM+VLEkhIQl2QEAveYHktQ7u8aKIwu63O/s9QcYVNZO85pd G4QjroNi4gY= =h1df -----END PGP PUBLIC KEY BLOCK----- ","permalink":"https://priv8t.com/pgp/","summary":"-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEanrs4RYJKwYBBAHaRw8BAQdAZEG52z/jS1TpGr1azPgArWJ6yaicAohKgsjB S7S/CBi0MEFsZXggRG9taW5nbyAoQ1RJIGtleSkgPEFsZXhfRG9taW5nbzdAcHJv dG9uLm1lPoivBBMWCgBXFiEELoOiRimr1cKFV6C9jsKY/PB1SiUFAmp67OEbFIAA …","title":"PGP Public Key"},{"content":"Sinobi Ransomware-as-a-Service / Closed Affiliate Model Windows .SINOBI RClone Lynx Ransomware INC Ransomware Unnamed affiliates The Structures Group CVE-2024-53704 CVE-2024-40766 CVE-2025-61882 T1133 External Remote Services T1190 Exploit Public-Facing Application T1078 Valid Accounts T1543.003 Create or Modify System Process: Windows Service T1059.001 Command and Scripting Interpreter: PowerShell T1021.001 Remote Services: Remote Desktop Protocol T1485 Data Destruction T1486 Data Encrypted for Impact","permalink":"https://priv8t.com/ransomware/sinobi/","summary":"Overview Platforms: Windows Variants: — Extensions: .SINOBI ATT\u0026CK software: RClone Initial access: External Remote Services · Exploit Public-Facing Application · Valid Accounts Top countries: US · IN · CA · FR · GB Observed sectors: …","title":"Sinobi"},{"content":"The Gentlemen Storm-2697 hastalamuerte zeta88 Thegentlemen Go-based (Windows/Linux/NAS/BSD cross-platform) C-based ESXi locker C-based Windows (in-development) Ransomware-as-a-Service Windows Linux NAS BSD VMware ESXi .umc16h .7mtzhh .fjn1jw .axfsmg .ojuopo GentleKiller SystemBC Mimikatz PsExec AnyDesk WinSCP Rclone Cobalt Strike PowerShell WMI deploy_gpo.ps1 ThrottleBlood.sys All.exe Allpatch2.exe PowerRun.exe SharpADWS NetScan Advanced IP Scanner netsh Windows Kernel Explorer OpenArk64 Impacket NetExec Chisel Amnezia VPN OpenSSH PuTTY Proxychains MeshAgent FreeRDP Cloudflared Wireguard VPN OpenVPN Responder BloodHound equivalents (e.g., SharpHound variants) Velociraptor Titanis BloodHound/SharpHound GOLD SHERWOOD Qilin RaaS The Gentlemen Affiliates Grupolider AO Distribution ACA Pescara IT Road transport Hattiesburg Eye Clinic US Healthcare Indic IN Technology Aurora Technologies Goteborgsregionens Tekniska Gymnasium SE Schools Alchin Long Group AU Construction Gelarti PE Food and drinks businesses Balkan Polymers BG Manufacturing Cedars Foods Agenzia Vittoria Assicurazioni Insurance services Downrite Engineering Professional Services Neff Drexel CH Attorney Iveta HR Education Humboldt BR High Oakham Primary School GB Tentac JP Information Technologies Consulting Dome Gold Mines Mining Dang Invest Group VN Financial organizations BGR Energy Systems Energy \u0026 Utilities Ardom Eilot IL Technical Asia TH Multipla Contabilidade Empresarial Business Services Somit FI Wada Farms Agriculture \u0026 Food Aforpa FR Training Apteki Mareshki Pharmacy and drugs manufacturing Librería Santa Fe AR Retail \u0026 E-Commerce Sarku Japan TMI Tecnicas Mecanicas Ilerdenses ES MedSkin Solutions Dr. Suwelack AG DE PharmaEssentia Corporation TW Air Canada CA Airlines Hollard Insurance Group ZA Drogueria Saporiti Sacifia Mutant University of San Francisco Universities Nile Projects Trading EG Real Estate / Real Estate Management Chip7 PT Sharp Office S A Chile CL Unknown Yapı Merkezi TR Soni Dwarkadas Virchand Zanini Automotive Domis DK Metro Biotipo Jeans Apparel Ritz Safety Comin Sac AbacoViaggi Travel and tourism industry El Carriel CO Superstore GE Lider Aviacao Air transport Leo Schachter Diamonds Luxury Zdrowit PL Veradigm Seasia Infotech High-tech CareerSource Palm Beach County Government and administrations Nutex Health The Sole Saudi Consulting Services SAUD CONSULT SA Consulting EP Manufacturing Bhd MY Glassdoor Human Resources G R Infraprojects Northwest Trophy General Gruppo Wealth Management Ixa Systems Tecno Accion Probe Test System SUNSEA Thai Film Industries PCL Entertainment industry Adkisson Group ESB Puerto Rico Corp PR Renewable energies Nutrypollo MX Brebur MB Associates Exacta Optech Labcenter Servicios Aereos Estrella Zion Construction Party Rental Hospitality TEC Container Verbux Espinos Incolur AGS Cinemas Eyecare Center of Snohomish Gould Sherwood Consulting Espac Layher Volktek Meridian Logistics Group Transportation \u0026 Logistics BioPharma Aquasea NO CAZ Investments BZ Oceanica Internacional WS Maritime transport Ariel Energia Magdalena Grand Beach Golf Resort Akatake Engineering ESCON Group Almeer AE Geb Sas ARBEITERKAMMERN AT Public sector UOLconsult dlp motive AWJ Holding Lexacaucho LOG Systems P**** R***** Babcock Defense industry CRASL Charity associations Senvest Capital Finance Roadvision Systems Euroscreen Printing Services Avanta Maroc Ex Adecco MA EKEPIS GR Central administration and government Megalaser Industria Metalurgica LTDA Community Connections Acli Non-Governmental Organizations (NGOs) Vector Two Technology TOA Tempel Plaza Auto Mall The Coffee Bean KFC Kosova First Coast Heart Vascular Center Cityside Homes Retail Business Management Systems Gravity Coffee Ollies Place Kidswear IPS Gfeller Treuhand und Verwaltungs Safeware PharmaEssentia CONTAC Ingenieros RAK Construction Lancesoft India AIMS Group AnMed NTU Alumni Club SG Canopy Support Services Human Services Mikel Coffee Hong Kong Baptist University HK Eva Care Consumer Products Premier Pigs Zion Contracting Hartfiel Automation DHC INKA Group GmbH Co Vitex Pharmaceuticals Mdj Management Hst Groupe BPCE Banking institutions Axson Teknik Ponti Godollo HU Local administrations Hoang Chiropractic Center aZaaS HIWIN National Furniture Outlet TESI Intranet Gov Brasil Feraboli Zootech Nobema Vemec LensAss Architecten BE Architecture / Engineering Phase Technologies Holborn European Marketing CY Marketing ZS Salovnova CZ Halliday Watkins Mann YY Business Solutions TopMark Funding Control Concepts Technology Philippine Savings Bank PH Las Cenizas Kenaitze Indian Tribe Additive Manufacturing Salem Saleh Babgi Salama Medicals Distributors Private TZ Krafman Kosh Innovations Saturn Industries Acosta Sons CFS OHK Energy IE Hutch Paving CRB group Partition Specialties Preferred Premier Fiduciary Bater Precision Concrete Pumping Clear Vision Signs Orsima The Municipal Chamber of Serra Legislative branch (parliamentary chambers) Efrata College of Education Academic Institutions Amicell Paula Fish Known IS Peachtree Group Municipalidad de San Luis World Wide Fittings Chemco Systems Total Auto Business Solutions Okovolt Solartechnik Pertamina ID Oil Promatrix Malaysian Nuclear Agency Nuclear power (civilian use) Delkart Industries Pvt ETA Technology Pvt Kontact Consortium India Pvt Upanal CNC Solutions Indus Protech Solutions Angel Hotel Hotel The Garfield County Sheriff Office Buck Knives Advanced Marketing European Design MK Jewelry MK GUERREIROS seguros Tikona Infinet Telecommunications TC Printing Oldelval Oleoductos del Valle Decoupe Laser Services Thialf NL Sports Title Resources Clarke Radiology SICSOE Gloria Maris Groupe Compagnie des Caoutchoucs du Pakidie CI HBS Group Agapit Raben Group Henry Frerk Sons SMRTR DayNDay Affinity Designs Lenrose Velum Ceska filharmonie Culture and entertainment Herbahaz vpcgroup.com customfoam.com Optiforms MatTek Healthcare research Conecsus Wunschkind Klinik Dr Brunbauer Sirl Disney Family Ecopetrol Military Sealift Command Defense ministries (including the military) Advantage Home Health Care Sunway Scientific Research Tangram Interiors BRAC BD Customs Watch Terry P Moosmann CPA PC Gallant Hanseata Metro Mondego Transport Comet Enterprise Corp Landesbibliothek Coburg Culture ALUFE Femszerkezeti Kft Tooltec Terra Vitis Vignobles Toutigeac Dink Co Ltd Lsn Giraudi Group Mesto Celakovice Kaneko Byggelit Sverige Royal Foods Pharma Wholesale Welders Supply Equipment Rentals VASBE RU Services Gene Codes Forensics Lopes Law Carita BDO Greece Dash Door Glass Ferretería Scopazzo Fortray UK IT Services and IT Consulting Martin Cava Printing Equipment and Supplies Aveiro Constructors Limited Triquesta Software Development Vicenzi Group Food Energon Energy Services Open Options Access Control Solutions INTERNET AG IT Services Crossroads Medical Management Healthcare Management MBT Energy Pro-Tech Technology Technical Solutions Group hiddeenn CSIR Structural Engineering Research Centre Research and Development Jump Solutions Inc Automovil Supply S.A PY Automotive Retail Excel Cell Electronic Semiconductor and Electronic Component Manufacturing Mercado Libre E-commerce and Financial Technology Ce Ratp Comite D entreprise Ratp Employee Services Keifert Building Cleaning Services Kosmos Publishing EBNY Development Real Estate Tonnies Group Food Production Harsha Engineers Precision Engineering Quanterm Logistics Sdn Bhd Freight \u0026 Logistics Services Spedidam Collective Management Organization Arabia Falcon Insurance Company SAOG OM Insurance LogiQuip Healthcare Storage Solutions Virginia Historical Society Non-profit Organization Medic Rescue Ambulance Services Shamrock Holdings Inc. Private Equity CTM India Limited motherson INDIA Bell Hardware CHIFENG GOLD SEPON LA Natren Au Vieux Campeur Ayres Carr \u0026 Sullivan, P.C. Immling DHC Corporation Steegaa Interior Indra Group Climax Technology Centre Ophtalmologique dErmont Comp Trading Co Mondottica OSP HOLDING FRANCE NATURGHIACCIO MakoLab EMAS Group The City of Boyne City Oron Law Firm Wacha Justen NI Legal Services CUI Agency Melcor Developments Ltd FAC Logistique SDEZ Pou Sheng International Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik Atlas Elektronik Maritime Electronics and Naval Systems Plateau Excavation Al Dhow Group Diversified Conglomerate Beran Concrete BDS CZ Stadttheater Giessen Performing Arts Gegenbauer Elektrotechnik Electrical Engineering and IT Services Meccanica Gn Precision Manufacturing MBO GmbH Surface Technology GIA Partners Financial Services Hooke Laboratories Biotechnology Rowley Properties Canada Wide Media ErgoMed Occupational Health and Employment Testing Royal Thai Navy Housing Cooperative Housing and Financial Services International Freight Services Logistics and Freight Forwarding Keywest Projects Engineering, Procurement, and Construction Management (EPCM) Vera Chimie Management Alexander Buch Bilanzbuchhalter SGS Malaysia TERRIO Therapy Fitness Ty Thac Co Amigest Yudu Technology Burris MacOmber Sertrans Cofaq Al Khaja Holding Athens Orthopedic Clinic hiddenn Buechel Stone Maine Oxy Enciso Ltda South Texas Spinal Clinic Mahajak Development Calipage Humblet Ministarstvo zdravstva Republike Hrvatske Palmer Sicard Linnecken Partner Centre Medical Crowley Executive Coach Mackay Sugar SigmaControl Buratti National Museum Times Software Traublinger Fecovita Constructions Piraino Kozminski University Cole Manufacturing UiTM Holdings Scenic Hudson Silmquinas e Equipamentos Tokabei Japan Allensbach Volunteer WCM Remedium Yao Yuan Technology Goldlion Danzo Group Trigon America FESCO Adecco The Clinic Integrated Distribution Central Arkansas Pediatrics Metroply Tress Institucion Cervantes Empty Jyharn Electronic IP Rings M Rocha J Serra Lda Anandji Haridas Arabian Procession Holding Smile Siam Printing Service Media \u0026 Entertainment Fibrenoire Brian Jessel BMW Harrell Martin Peace Computime Group Bouri Group TN National Industries Soniva Dental PK Suburban Water Water distribution and supply Downriver Medical Associates Soja de Portugal TeLoh Liztex Guatemala GT 3E Accounting Kunal Enterprises Edgewood Surgical Hospital Thoresen Thai Agencies Michigan Surgical Center Mayelia Automotive Techmar Grupo Premier Fonderia Corra Heartland Growers Corporacion Prokompra VE Seeley Office Systems Le Perreux sur Marne Sanatorio Delta Hussey Seatway Caka Grup Lojistik TRANSSYSTEM Group Cloud service providers ACAM Systemautomation Koa Glass Openmind Networks Grupo Pasquel EC MBM Corp YMCA of Columbia DEVO-Tech Modern Display University of Finance and Administration Internal Medicine Polyrack Internet Technologies Designs E-Control Systems Ross Yerger Insurance Instituut voor de Nederlandse Grupo Alvorada Ponisch Abogados Digiprint Qatar National Broadband QA Electroban SAE Electricity Oriental Diamond SETCAR Value Exchange International Focus Design Partners Shajarpak Securities IR Dodson \u0026 Horrell Amstel Securities GeTeCe DermaPharm Hillside Lumber DEVCO Development Arizona Professional Painting McCarthy VeriCon KUPER TDS Misr Chemical Industries CHX Express Mundo Amtae Nrt India Da Guan Technology Riggotts IPE Gator Cases DATAMATIC C2O Architects FMS Clark Fixture Technologies Manhattan Fire Safety Corp Worralls NZ Heinrich Kopp Nostrum MIMS IT Management Colegio Notre Dame Campinas Beaconhouse School System Heatherwood Golf Club ACFA Regionale de Calgary Fabritius Forsheda Stlverktyg Magisterial Service PG Kınık Gross Arcelik Media Consulting Keretapi Tanah Rail transport Triquim Engineered Advantage The Modern Flour Mill East Millennium Partners Ontario Physiotherapy Association Levante Living Kasapreko GH Marutake Mediaplex Diviso Grupo Financiero La Kaffa International Farmers Association of Iceland EEC Group Coralina Lawson Software Suzhou Yike Kejian CN SmartSystems Champion Homes Euro Creations Uniview Technologies Friktimporten Stockholm Sgt SYSTHERM INFO Cosmo Group Sunspray Food Americo Advogados CH Express Casa Andina Jati Tinggi Greenpharma Disk Precision IC Partners Marchesi di Barolo El Ordeno Bmtp Laboratório Santa Luzia Jumbo Transport Philip Lee Jean Cultural Suma Sklep Shops Anderlues Teleos Systems The Marton Agency PsychPlus UK Electronics Intra GEM Terminal Brand Collective Cleor Harlem Stage International Maritime Hospita Double C Farm BRC Biotechnology NSOFT Verzinkerei Rentrop Hangzhou Industrial Caja De Seguro Social PA ******.*** Aichi Electric Tapon Corona Test Rite Ravands Plastech Gesvalt DYSA Synergy France Metropolitan Pediatrics Burning Rock Biotech Thai Rung Union Car Structures Stucco Thai Special Gas Gas ACE Consulting Engineers Optima Servicios Financieros Hospital del Sur Ciarus Mahyco Pvt Innovision Holdings Win Academy DGS EMCO Holding Adaptavist Group LTD Thammasat University PTT Philippines Grupo Tawa Omikenshi Delta Ducon Engenharia SATS Sports Club Sweden Distritech AIRCOS Zanzi Das Labor GCA Professional GCA Group St Fabian Gaposa alloha.com Far East Fame Medici Group Terminal 21 UCPS Dreamtoy Zamek Namest Equity Life jrk.com **********.com Centro de Especialidades Cortporation Colina Kabelovna Kabex Payap University Canal Capital Chase Asia BCN Medical BITS \"Business Information Technology Solutions\" Vexin Normand GPAINNOVA 2LG Prod Excellentiam Economia MicroChem Cerio MEDICUS SHUPPAN Rajagiri Hospital Micro Leasing Groupe Caddac Elundini Caribbean Medical Center Docaret Einstein Technology St Fabian Catholic Church ControlGMC eDevice Nenplas Kpropha Sodimatel Fasteners Cosmesia Grupo San Jacinto Nephrology Associates Malia Group LB LAF Hotel Aree Gerleinco Primus Comtec 2000 RO Reanthong Partcenter CHS Villach Afezo Ricopia All India Minerals Labtician Ophthalmics Special Shapes Refractory Grand Hotel Thg Fundao Para Sejlstrup Universidade Federal de Sergipe Zabun Sando Tech ACFA Civil society Amata Boutique Harley-Davidson Silvestres Nathalin Group SATO Advanced Connection Corporation OCEANIST ENGINEERING REDACTED Ruamjai MUST Informatique OKJ Group Smartbytes Industrias Iberia El IBR Dos Global Trust Advisors Wachendorff Silver Lake Medical Center True Value Pollo Cibao DO Sasin Colleges \u0026 Universities Line Up Korea KR Seac Qingtian Express Co. Garuda Indonesia Airlines Grupo Progresso Sawafi HUGS Insurance Perfumeria Pigmento Oceania Gas Chemicals \u0026 Related Products Comdat Datasystems CROSS JEANS Zakrt Intsika Yethu Municipality Government Global Group Copamarina Beach Resort Futue Bath Durables LSA International Gruppo Avanti White Beach Hotel Yash Highvoltage Insulators Pvt City of New Castle Nile Air Information Smart Glass Autostrad Rent a Car Emirates National Group WCT Holdings Berhad Erg Otoyol Ghana Bauxite Energy, Utilities \u0026 Waste Utility Clark Foam Products Smartply Europe Instituto Nacional de Derechos Humanos UniFil NFT Technology Museu do Caramulo Agis Civil Engineering Construction Fgf Colleges \u0026 Universities Infinite Tiers Group Silvi SRL Marina Home Interiors Nishiyama Seisakusho BAM - Brand Art Media Gady Family Dome Partners Chonburi Provincial Administration Torus PLUS Malaysia Berhad EXIM Bank Ankara-İzmir Trace CPQ Ingenieros Hafa Novetex Textiles Wells Fargo L'Aeroclub Area Limpia KlearNow.AI rea Limpia Far East Thin Red Line Handsome Manufacturing Nobel Hygiene Pvt Wieson Technologies Abatix Lawsoft Hydrometrics Röben Tonbaustoffe GmbH MBM Bluemega Sibca Garko Casa de España Sincere Corporation Unimed Anápolis Ayuntamiento de Beniel SASI JSC Autofinanciera CPF Financial Services KE Orlík Compressors USTAR Magen Eco Energy WRP Asia Pacific Sdn Bhd Witzenberg Municipality Sita Sud Rola Motor Group Paltrack Lotus Bedding Shtainmetz Aminoach BIB Insurance Brokers British School of Brasilia Eurotex San Carlo Gruppo Alimentare Kontena Nasional Berhad PAO HWA TRADING LTD Dongguan HYX Industrial Rogers Capital MU Dekoyap Warka Bank for Investment and Finance IQ Hog Slat DTI Foreign Trade Service Corps Real Tech Dsm Information Technology Trade Ltd. Pos Bilişim Teknolojileri Wamtechnik Systherm Grupa Hart Complexul Energetic Oltenia Stewart Engenharia BioNet-Asia Usina Sao Jose Do Pinheiro Ever Green Industria e Comercio Ltda All Rush Santa Casa de Assis Solus Tecnologia em Sistemas LTDA HSR Specialist Researchers ********.com Flavor Producers Solumek *****.com ***.*** LAST TIMER UPDATE Everbiz Industrial Co. Ltd. Devereux Advanced Behavioral Health St Stephens International United Enterprise Fund AkroStar Technology Co., Ltd. Akrostar ***.*** Colliers Sansala Pacific Holdings Group JSC. AiHealth KIM Dental NBCAPITAL JOINT STOCK COMPANY Fintech Singapore City Development Company Limited (SINGCONS) Talarico Ecuacorriente S.A. ************.com DRD Communications St Stephen's International Silverlake Axis Donacoop (VinaCapital) PT Pupuk Iskandar Muda Madagascar Airlines MG ICET Studios Personal Collection Seguros la Cmara 2GO Group AUSA Soluciones Logisticas Astra Otoparts / PT. Inti Ganda Perdana Al-Babtain Power \u0026 Telecommunication Thai Future Inc. PCL Cadisa ARMONIA MEDICAL S.A.S. Instituto Socio-Económico Comunitario (INSEC) NP SV-Büro Ing. Schulz GmbH Cervantes Ceres UY BIOLAP Soluciones Médicas Proplastics ZW Kandeo Ransomware Recover Indonesia JN Aceros Flexofast Indonesia Del Campo Supreme Cremona Inoxidable Grupo Halcon JIEI (Thailand) Co., Ltd Wharton Independent Kuwait Portland Cement KW Amv International Development Liceo Francés Antoine y Consuelo de Saint-Exupéry Dolidol AB Mauri Private InjectSense Algorithmica Research Sigma PC Chandra Jewellers Shifa Oman Oriental de Seguros Venezuela Re J.V.D.B. \u0026 Associates Inc Laboratorio Clinico Santa Rita CR Narumi (Thailand) Co.,Ltd. Ophtazon Surtel Technologies Pvt Saelen/Heizomat LOCATION PEINTURES PRESTATIONS (LPP) CVE-2024-55591 CVE-2025-32433 CVE-2025-7771 CVE-2025-33073 CVE-2025-55182 T1486 Data Encrypted for Impact T1490 Inhibit System Recovery T1562.001 Impair Defenses: Disable or Modify Tools T1070.001 Indicator Removal: Clear Windows Event Logs T1567 Exfiltration Over Web Service T1190 Exploit Public-Facing Application T1078 Valid Accounts T1133 External Remote Services T1566 Phishing T1059 Command and Scripting Interpreter T1027 Obfuscated Files or Information T1562 Impair Defenses T1070 Indicator Removal T1484 Domain or Tenant Policy Modification T1053 Scheduled Task/Job T1021 Remote Services T1570 Lateral Tool Transfer T1219 Remote Access Software","permalink":"https://priv8t.com/ransomware/thegentlemen/","summary":"Overview Platforms: Windows · Linux · NAS · BSD · VMware ESXi Variants: Go-based (Windows/Linux/NAS/BSD cross-platform) · C-based ESXi locker · C-based Windows (in-development) Extensions: .umc16h · .7mtzhh · .fjn1jw · .axfsmg · .ojuopo …","title":"The Gentlemen"}]