Ransomware Group intelligence
Toufan
ActiveTrack Toufan with 139 published victims and 6 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Toufan is tracked by Breach House as a ransomware group with 139 published victims.
Israel is currently the most targeted country in this dataset.
6 known leak locations are currently associated with this group.
Leak Status Distribution
139
- Leaked 13 9.4%
- Pending 126 90.6%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (6)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 6 | Web location | Up checked 4h ago | toufanleaks.org |
| Leak location 1 | Web location | Up checked 4h ago | t.me/s/CyberToufanBackup |
| Leak location 2 | Web location | Up checked 4h ago | t.me/s/CyberToufan |
| Leak location 3 | Web location | Up checked 4h ago | t.me/CyberToufan |
| Leak location 4 | Web location | Up checked 4h ago | t.me/CyberToufan02 |
| Leak location 5 | Web location | Up checked 4h ago | t.me/CyberToufanBackup |
Top Activity Sectors (9)
Typical Attacks (12)
▼MITRE ATT&CK does not currently catalogue Toufan, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: toufan executes PowerShell scripts to stage payloads and manipulate system processes during initial compromise.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: toufan leverages native API calls to bypass detection while executing malicious commands against target systems.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
What they do: toufan modifies registry run keys to ensure malware execution upon system reboot for persistence.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: toufan disables antivirus tools and security software to prevent system recovery and hinder forensic analysis.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.002 Software Packing Stealth
What they do: toufan applies software packing to obfuscate malware binaries, evading signature-based detection mechanisms.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1070.004 File Deletion Stealth
What they do: toufan deletes Volume Shadow Copies and backup directories to eliminate recovery options for affected systems.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1018 Remote System Discovery Discovery
What they do: toufan conducts remote system discovery to map network topology and identify additional high-value targets.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1049 System Network Connections Discovery Discovery
What they do: toufan queries system network connections to identify active services and communication endpoints for targeting.
What that means: Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.
-
T1057 Process Discovery Discovery
What they do: toufan performs process discovery to identify critical services and isolate high-value targets for encryption.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: toufan exploits SMB/Windows Admin Shares to move laterally across networked machines within victim environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: toufan encrypts victim files using custom ransomware routines, locking data for extortion demands.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: toufan invokes Inhibit System Recovery techniques to block automatic restoration processes and maximize impact.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Victims (139)
Search, filter and paginate the victim timeline for Toufan. Showing 1–100 of 139.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Cyber Toufan id34505 View details | — | pending | |||
|
Skip to content . .*/(/. &@#(((((&@* .%@#((((((((#@@, /@#((((((((##%&@@% #&(((#%@@@@@@@@@@@@& &%(((#(((#####%%&@@@@@, .&((%@@@@@@&&@&&@@@@@@@@@* /@@/ /(((((((((#&@% (@* @. /(((((((((((@# %(.&, /. ,((((((((#@. *&@@@.&* .&@@@* %@@@#*(((((%@@&( /@&###(&@((@*. /((#@&(##(%@* #@#%@@@@@#&@*/@@( (#@@#&@@@@&(&/ ,@&&@@@@@@@@@@@*,@%/ (@@@@@@@@@@@&%&. .@@@@@@@@@@@@@@@@( (*,. /@@@@@@@@@@@@@@@@ /@@@@@@@@@@@@@@@@@& %@@@@@@@@@@@@@@@@@@ #@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@* ,@@%#######################################################&@# ,@@%#######################################################&@# ,@@%#######################################################&@# ,@@%########################%%%(%%%########################&@# ,@@%####################%(/****,****/######################&@# ,@@%###################**,*,*,*,*,*****/%##################&@# ,@@%#################/*,*,**,,*,,/,,*,*,,##################&@# ,@@%################%*,**.**,,*,,/,,*,,**.%################&@# ,@@%################(((#%%##############(/#################&@# ,@@%#######################################################&@# ,@@%#######################################################&@# ,@@%#######################################################&@# #@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@, ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,. ______ __ ______ ____ / ____/_ __/ /_ ___ _____ /_ __/___ __ __/ __/___ _____ / / / / / / __ \/ _ \/ ___/ / / / __ \/ / / / /_/ __ `/ __ \ / /___/ /_/ / /_/ / __/ / / / / /_/ / /_/ / __/ /_/ / / / / \____/\__, /_.___/\___/_/ /_/ \____/\__,_/_/ \__,_/_/ /_/ /____/ |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x02 : DataCar id34506 View details | Other | leaked | |||
|
Operation – “Enter Upon Them By The Gate” – 0x02 : DataCar 🔴 Bismillah…🔻🔻0x02🔻🔻 — “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” — Today should be yet another reminder that you will NEVER get anywhere by violating the terms of the deal and that the only way to get your prisoners back is by sitting at the negotiation table… Continuing with #operation_EnterUponThemByTheGate today we […] February 26, 2025 Operation -“Enter Upon Them By The Gate” – 0x01 : Safety-car 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —We here at Cyber Toufan decided not to keep you wait any longer and give you a small yet interesting leak for a company that were able to successfully breach and Exfiltrate their data…This should be a reminder to you and your government that […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x12 : Zevulun Marine Systems LTD id34495 View details | Manufacturing / Engineering | leaked | |||
|
Operation – “Enter Upon Them By The Gate” – 0x12 : Zevulun Marine Systems LTD 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —NThey build warships while Gaza is buried under rubble. They claim to “defend themselves” while waging a war of extermination. We will never forget nor forgive what they do to Gaza’s children.Today we expose Zevulun Marine Systems LTDin Ramat Hagolan. This company is the […] October 4, 2025 |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x11 : exposing 20 complicit law fir id34496 View details | — | pending | |||
|
Operation – “Enter Upon Them By The Gate” – 0x11 : exposing 20 complicit law firms 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —You who falsely claim to be guardians of law and justice! You are the very ones knee-deep in innocent blood, complicit in massacres in Gaza, Lebanon, Yemen, and Iran. We warned you of consequences, and today we fulfill our threat. We will tear off […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x10 : THE PHOENIX id34497 View details | — | pending | |||
|
Operation – “Enter Upon Them By The Gate” – 0x10 : THE PHOENIX 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —◼️ MAJOR CYBER STRIKE: FULL BREACH OF ZIONIST “THE PHOENIX” (fnx.co.il)◾️ TARGET PROFILE: Company: “The Phoenix” (Insurance giant claiming operation since 1949 — historical falsification). Market Cap: 360M ILS (Shekel). Employees: 3,000+ cyber-defenders (failed). ◾️ OPERATION DETAILS:📂 6,000 CLASSIFIED DOCUMENTS 💾 9 GB SENSITIVE […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x09 : . IZHAR ENGINEERING SERVICES id34498 View details | United Arab Emirates | Manufacturing / Engineering | leaked | ||
|
Operation – “Enter Upon Them By The Gate” – 0x09 : . IZHAR ENGINEERING SERVICES LTD. 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —They celebrate their small victories while Gaza bleeds. They talk of aid while dropping bombs. We neither forgot nor will we ever forget the suffering. The so-called “humanitarian aid” is a cruel joke—a trap disguised as help. Your agression on Iran will, Inshallah, end […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x08 : Gavriel Machal Law Firm id34499 View details | Israel | Finance / Legal / Insurance | leaked | ||
|
Operation – “Enter Upon Them By The Gate” – 0x08 : Gavriel Machal Law Firm 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —Netanyahu is at it again. He thinks another war will hide his failures. He underestimates us. He underestimates everyone. He’s now attacking Iran and others, thinking he can escape the mess he’s made. Don’t forget about Gaza. Don’t forget the genocide happening there. He’s […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x07 : GoldenBit id34500 View details | Other | leaked | |||
|
Operation – “Enter Upon Them By The Gate” – 0x07 : GoldenBit 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —The act is over. The image they’ve carefully built of being strong and safe is starting to break. Let them deal with their empty promises as the prisoners will never return without a deal. We’re showing the truth, little by little, with each discovery […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x06 : Jerusalem Community Health Ce id34501 View details | Israel | Healthcare / Pharma | leaked | ||
|
Operation – “Enter Upon Them By The Gate” – 0x06 : Jerusalem Community Health Centers 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —The suffering continues. Bombs are falling, children are crying, and the world is watching while Netanyahu stays in power, because he creates desperation. Blocking help from getting to Gaza isn’t just a rule; it’s a plan. A cold and unfair plan to keep the […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x05 : Go-Net Software Solutions id34502 View details | IT | pending | |||
|
Operation – “Enter Upon Them By The Gate” – 0x05 : Go-Net Software Solutions 🔴 Bismillah… 🔻🔻0x05🔻🔻— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” — Tonight’s leak is the Israeli Software Development firm, Go-Net Software Solutions https://www.go-net.co.il/. An organization trusted by many in Israel including the IDF, the National Bank, the Israeli Knesset (& more), and themselves a Microsoft Certified Partner. It’s no surprise that Microsoft […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x04 : Mann-shinnar id34503 View details | IT | pending | |||
|
Operation – “Enter Upon Them By The Gate” – 0x04 : Mann-shinnar 🔴 Bismillah… 🔻🔻0x04🔻🔻— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” — Carrying on with #Operation_EnterUponThemByTheGate today we present you with another leak from yet another “Israeli” company.“Mann-Shinar” is an international architectural firm in “Israel” and the United States, specifically within the line of Aviation and Transportation Structures, Public Buildings, Military Structures, Corporate […] March 12, 2025 |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x03 : Edri Ltd id34504 View details | Other | leaked | |||
|
Operation – “Enter Upon Them By The Gate” – 0x03 : Edri Ltd — “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —From transportation sector to construction sector and even more. As our old promise to make the zionist state as an open book , as long as occupation and injustice continue, we also continue our resistance and struggle. Today we announce our breach of Edri […] |
||||||
| Ransomware | ILDefenseLeaks : Optum Industrial Engineering Systems – https://optum-ies.com id34485 View details | United States | Manufacturing / Engineering | leaked | ||
|
ILDefenseLeaks : Optum Industrial Engineering Systems – https://optum-ies.com O Zionists..Cursed be you morning and evening.You are still bombing children in Gaza and Lebanon, threatening Yemen and Iran… and we continue and will continue to struggle against your aggression.Today our target is number 5 of 19 that were breached and all of which were accessed. All of them are directly or indirectly related to […] January 6, 2026 |
||||||
| Ransomware | ILDefenseLeaks : UPC Precision Castings Ltd – “upccastings.com” id34486 View details | United States | Manufacturing / Engineering | pending | ||
|
ILDefenseLeaks : UPC Precision Castings Ltd – “upccastings.com” Rain has always been a source of joy and blessing for all people, but in Gaza this time, things were different due to the destruction and genocide perpetrated by the Zionists in Gaza for over two years! Most people in Gaza are homeless! The rains have caused tens of thousands of people living in tents […] December 12, 2025 |
||||||
| Ransomware | ILDefenseLeaks : Saar Engineering – “saarengineer.com” id34487 View details | Germany | Manufacturing / Engineering | leaked | ||
|
ILDefenseLeaks : Saar Engineering – “saarengineer.com” This day is a precious day for our hearts, the day of the liberation of our country, Syria. After 13 years of revolution, our country has become free of tyranny, injustice, and oppression. Soon, the rest of the Golan Heights will also be liberated from the Zionist occupiers of our land since 1967. History has […] December 10, 2025 |
||||||
| Ransomware | ILDefenseLeaks : CR Casting, Exact LTD and Tefen Metal Castings id34488 View details | Manufacturing / Engineering | pending | |||
|
ILDefenseLeaks : CR Casting, Exact LTD and Tefen Metal Castings The Zionist enemy is still killing innocents, not respecting or honoring agreements, and not caring about blood and lives, considering them cheap and thinking there is no accountability or punishment. Sometimes, it acts like a desperate and dying person. According to UNICEF, 67 children have been killed in Gaza since the start of the ceasefire. […] November 28, 2025 |
||||||
| Ransomware | ILDefenseLeaks : Maya Engineering – “maya-il.com” id34489 View details | United States | IT | pending | ||
|
ILDefenseLeaks : Maya Engineering – “maya-il.com” O you Zionists, 100 martyrs in one day for violating the ceasefire in Gaza. This crime will not go unpunished.Your time is up. We warned you, but you did not care! You have opened the gates of hell upon yourselves.You always break your promises and agreements, disrespect the blood of children and women, and do […] October 30, 2025 |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x17 : ACOM Communication Strategies id34490 View details | — | pending | |||
|
Operation – “Enter Upon Them By The Gate” – 0x17 : ACOM Communication Strategies 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —The Global Sumud Flotilla is denied access to Gaza by Israel. Our countries should also reject entry for these killers, their children, and anyone complicit. They should face jail or death for their crimes.Armelle Communication Strategies deceitfully aids Israel in altering its demographic landscape, […] October 4, 2025 |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x16 : Rational-Solutions id34491 View details | IT | leaked | |||
|
Operation – “Enter Upon Them By The Gate” – 0x16 : Rational-Solutions 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —This arrogant occupation continues its aggression unabated, and today it has added a new country to its list of aggression, namely Qatar, and has increased the number of its enemies by millions. The killers who slaughter children in Gaza are still committing atrocities, but […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x15 : Oz Aviation ltd. id34492 View details | Manufacturing / Engineering | leaked | |||
|
Operation – “Enter Upon Them By The Gate” – 0x15 : Oz Aviation ltd. 🔴Bismillah…— “Enter Upon Them By The Gate, and when you enter it, you will surely be victorious.” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ فَإِذَا دَخَلْتُمُوهُ فَإِنَّكُمْ غَالِبُونَ” —The ongoing genocide in Gaza has led to the heartbreaking loss of over 50,000 children. The Israeli Air Force has dropped more than 40,000 bombs, including precision-guided munitions like the […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x14 : shiran-tours.co.il id34493 View details | Israel | Hospitality / Food & Beverage / Tourism | leaked | ||
|
Operation – “Enter Upon Them By The Gate” – 0x14 : shiran-tours.co.il 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —The Israeli invasion in Gaza has severely disrupted transportation and road infrastructure, making it extremely difficult for people to travel safely.Many roads are impassable due to destruction, isolating communities and cutting off access to essential services. Children are particularly affected, as they are unable […] |
||||||
| Ransomware | Operation – “Enter Upon Them By The Gate” – 0x13 : yechavedaat.org id34494 View details | United States | Other | leaked | ||
|
Operation – “Enter Upon Them By The Gate” – 0x13 : yechavedaat.org 🔴Bismillah…— “Enter Upon Them By The Gate” —— “ادْخُلُوْا عَلَیْهِمُ الْبَابَ” —yechavedaat.org has role in promoting violence and hatred against Palestinians, and its complicity in the ongoing assault on Gaza. The organization’s extremist ideology and rhetoric have contributed to a toxic environment of fear, intimidation, and bloodshed.We have in our leak the evidences that yechavedaat.org […] |
||||||
| Ransomware | ecom.gov.il id10307 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | maytronics.com id10306 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | carolinalemke.com id10301 View details | Germany | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | ari.co.il id10300 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | allot.com id10279 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | bconnect.co.il id10273 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | super-pharm.co.il id10272 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | teldor.com id10261 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | erco.co.il id10260 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | tefentech.com id10230 View details | Israel | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | zoko.co.il id10229 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | strauss-group.com id10188 View details | Services | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.pts-tools.com id10184 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.plasson-pead.com.br id10183 View details | Brazil | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | www.nistx.com id10182 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.ktstooling.com id10181 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.herrickindustrial.com id10180 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.drillmex.com id10179 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.dixie-tool.com id10178 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.copreinternacional.com id10177 View details | Communication / Marketing | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.butlerbros.com id10176 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | www.atwoodindustries.com id10175 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | wsies.com id10174 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | vehicle.touch-ins.co.il id10173 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | tryhardindustrial.ca id10172 View details | Canada | Manufacturing / Engineering | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sys.udidagan.co.il id10171 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sys.touch-ins.co.il id10170 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sys-cspartnershq1.caesarstone.com id10169 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | sys-cspartners.caesarstoneus.com id10168 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | sys-cspartners.caesarstone.sg id10167 View details | Singapore | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sys-cspartners.caesarstone.co.uk id10166 View details | United Kingdom | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sys-cspartners.caesarstone.com.au id10165 View details | Australia | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sys-cspartners.caesarstone.ca id10164 View details | Canada | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | sys.biopet.co.il id10163 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | store.toolneeds.com id10162 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | store.brunswickindustrial.com id10161 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | stage.kravitz.co.il id10160 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | shop.smithindustrialsupply.com id10159 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shop.shopsupply.net id10158 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shop.reggiemckenzieindustrial.com id10157 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shop.qct.tools id10156 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shop.lgindustrial.com id10155 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shop.emprecise.com id10154 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shop.clador.com id10153 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shop.britecon.com id10152 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | shefa-online.co.il id10151 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | selwayindustrialsupply.com id10150 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | rocket-supply.com id10149 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | rmpis.com id10148 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | reserved-il.com id10147 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | pts-tools.com id10146 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | product.touch-ins.co.il id10145 View details | Israel | Communication / Marketing | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | pmt-usa.com id10144 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | phoenix.touch-ins.co.il id10143 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | pet.touch-ins.co.il id10142 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | pet.biopet.co.il id10141 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | paragon-supply.com id10140 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | old.shefa-online.co.il id10139 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | norviktools.com id10138 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | northernprecisionsales.com id10137 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | newstore.johnstoncompanies.com id10136 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | mortgage.touch-ins.co.il id10135 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | morsecuttingtools.com id10134 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | mitchellmckinney.com id10133 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | mgisales.com id10132 View details | Retail / E-commerce | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | m.biopet.co.il id10131 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | libertytool.com id10130 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | ktstooling.com id10129 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | knightesupply.com id10128 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | keter.com id10127 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | keter.co.il id10126 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | its-supply.com id10125 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | h-o.co.il id10124 View details | Israel | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | goronco.com id10123 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | gordonindustrial.com id10122 View details | Manufacturing / Engineering | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | global.keter.com id10121 View details | Services | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | giddirect.com id10120 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | gfwdsupply.com id10119 View details | Other | — | pending | ||
|
No additional victim description available. |
||||||