Booba

☆ pin
Also known as Frag
Reports
38
First seen
Jul 6, 2026
Last seen
Oct 20, 2026
Motivation
Financial

Targeting

Victim regions
×1
×24
United States×24
Spain×1
Italy×1
Brazil×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1005 Data from Local System ×1T1486 Data Encrypted for Impact ×1

Indicators

domain ×41

Indicator values are available on Pro and via the API.

Recent reports

High

Booba ransomware gang claims CUNY Research Foundation victim

ransomware.live
High

Booba ransomware gang publishes Chicago Vein Institute as victim

ransomware.live
High

Booba ransomware publishes Pearland Pediatrics as victim

ransomware.live
High

Booba ransomware claims City of Mt. Angel, Oregon

ransomware.live
High

Booba ransomware publishes City Hall of Everett, MA as victim

ransomware.live
High

Booba ransomware publishes Coastal Carolina Neuropsychiatric Center as victim

ransomware.live
High

University of Illinois Chicago affected by ransomware attack on medical school

The Record (Recorded Future News)
High

Booba ransomware group claims MorseLife Health System victim

ransomware.live
High

Booba ransomware gang publishes Raleigh Family Medicine as victim

ransomware.live
High

Booba ransomware gang claims EdgeEndo USA breach

ransomware.live
High

Booba ransomware gang publishes Soni Medical Centre as victim

ransomware.live
High

Booba ransomware gang publishes University of Illinois Chicago as victim

ransomware.live
High

Booba ransomware gang publishes FUNAP as victim

ransomware.live
High

Booba ransomware gang claims Associated Gastroenterologists of Central New York

ransomware.live
High

Booba ransomware gang publishes COSEF as victim

ransomware.live
High

Booba project publishes Merrimack County as victim

ransomware.live
High

Booba ransomware gang publishes Smart Eye Care as victim

ransomware.live
High

Booba ransomware gang publishes Washington County as victim

ransomware.live
High

Booba ransomware claims Tulare Western High School victim

ransomware.live
Medium

Booba ransomware gang publishes GOTTHELF as victim

ransomware.live
High

Booba ransomware gang publishes Mestechkin Law Group P.C. as victim

ransomware.live
High

Booba ransomware group publishes Atlas Ocean Voyages as victim

ransomware.live
High

Booba ransomware gang claims Davroc as new victim

ransomware.live
High

Booba ransomware gang publishes Chernyy & Associates as victim

ransomware.live
High

Booba ransomware gang publishes Country-Wide Insurance as victim

ransomware.live
High

Booba ransomware gang publishes Federis Abogados as victim

ransomware.live
High

Booba ransomware gang publishes Betz Industries as victim

ransomware.live
High

Booba ransomware gang claims Oklahoma Manufacturing Alliance victim

ransomware.live
High

Booba claims Incredible Technologies as ransomware victim; 25 GB data theft

ransomware.live
High

Booba ransomware gang publishes Zynex as victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.