Signalis
sign in--:--:--UTC
Threat actors

Auditteam

☆ pin
Reports
50
First seen
May 15, 2026
Last seen
Oct 13, 2026
Motivation
Financial

Targeting

Sectors
Retail & E-commerce ×2Education ×2Government ×1Manufacturing ×1
Victim regions
×1
×1
France×1
Russia×1
South Korea×1
Japan×1
India×1
United Arab Emirates×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×57

Indicator values are available on Pro and via the API.

Recent reports

High

Auditteam claims Admirals Trading F&B distributor breach

ransomware.liveMedium

Auditteam publishes new ransomware victim

ransomware.liveMedium

Auditteam publishes new ransomware victim

ransomware.liveHigh

Auditteam ransomware gang publishes new victim

ransomware.liveMedium

Auditteam publishes new ransomware victim

ransomware.liveMedium

Auditteam claims new victim: steelco

ransomware.liveMedium

Auditteam publishes ProMind IT as ransomware victim

ransomware.liveMedium

Auditteam publishes new ransomware victim

ransomware.liveHigh

Auditteam publishes VIT (Vellore Institute of Technology) as ransomware victim

ransomware.liveMedium

Auditteam ransomware gang publishes new victim on leak site

ransomware.liveMedium

Auditteam publishes TEK SPB as ransomware victim

ransomware.liveMedium

Auditteam ransomware gang publishes new victim

ransomware.liveHigh

Auditteam publishes new ransomware victim

ransomware.liveHigh

Auditteam ransomware gang claims victim: kit-e.jp

ransomware.liveMedium

Auditteam publishes new ransomware victim

ransomware.liveMedium

Auditteam publishes palletshop as ransomware victim

ransomware.liveMedium

Auditteam publishes Wise IT as ransomware victim

ransomware.liveMedium

Auditteam publishes new victim: Buben

ransomware.liveHigh

Auditteam publishes dg.ac.kr as ransomware victim

ransomware.liveMedium

Auditteam publishes gownet.net as ransomware victim

ransomware.liveHigh

Auditteam publishes krimax.org as new ransomware victim

ransomware.liveMedium

Auditteam ransomware group claims new victim

ransomware.liveMedium

Auditteam publishes new ransomware victim (F9CF4B639CAC1B18)

ransomware.liveMedium

Auditteam publishes new victim FDC699DE3A112669

ransomware.liveMedium

Auditteam publishes new ransomware victim

ransomware.liveMedium

Auditteam publishes new victim on ransomware leak site

ransomware.liveHigh

Auditteam ransomware gang publishes new victim

ransomware.liveMedium

Auditteam claims new victim on ransomware leak site

ransomware.liveMedium

Auditteam publishes new ransomware victim

ransomware.liveMedium

Auditteam publishes new victim on ransomware.live

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans