Signalis
sign in--:--:--UTC
Threat actors

Emperador

☆ pin
Reports
44
First seen
Aug 12, 2026
Last seen
Oct 15, 2026
Motivation
Financial

Targeting

Sectors
Government ×8Education ×5Other ×5Manufacturing ×4Transport & Logistics ×4Healthcare ×3Energy & Utilities ×2Professional Services ×2
Victim regions
×1
×7
United States×7
Brazil×4
Argentina×4
Albania×2
Italy×2
Philippines×1
Vietnam×1
Spain×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×55hash_sha256 ×7hash_md5 ×2url ×1ip_v4 ×1filename ×1

Indicator values are available on Pro and via the API.

Recent reports

Medium

Emperador ransomware claims new victim: MPI LTDA

ransomware.liveHigh

Emperador ransomware publishes MyM Odontoclinica S.A. as victim

ransomware.liveHigh

Emperador ransomware gang publishes MyM Odontoclinica S.A. as victim

ransomware.liveHigh

Emperador ransomware claims CMC Auditores SRL as victim

ransomware.liveHigh

Emperador ransomware gang publishes Spelman Logistics breach

ransomware.liveHigh

Emperador ransomware gang publishes Imperial Diamond Jewellery as victim

ransomware.liveHigh

Emperador ransomware group claims Pancaribbean Logistics Group victim

ransomware.liveMedium

Emperador ransomware claims METROCOLOR S.A. as victim

ransomware.liveHigh

Emperador ransomware gang publishes OMUR HIRDAVAT LTD as victim

ransomware.liveHigh

Emperador ransomware gang publishes La Ponderosa as victim

ransomware.liveHigh

Emperador ransomware gang claims SitePro Rentals data breach

ransomware.liveHigh

Emperador ransomware gang publishes Polikem as victim

ransomware.liveHigh

Emperador ransomware claims Amazon Informática breach

ransomware.liveHigh

Emperador ransomware publishes SitePro Rentals victim

ransomware.liveHigh

Emperador ransomware gang claims Electrolux as victim

ransomware.liveHigh

Emperador ransomware claims Car Service Abschlepp victim

ransomware.liveHigh

Emperador ransomware gang publishes Electrolux and OnTrac breach notice

ransomware.liveHigh

Emperador claims OnTrac breach; demands $1M ransom

ransomware.liveHigh

Emperador ransomware group claims Receita Federal do Brasil breach

ransomware.liveHigh

Emperador ransomware gang publishes Alabama Woman's Health Care as victim

ransomware.liveHigh

Emperador ransomware publishes Studio Notarile Associato Salvatore Costantino E Anna Favarato as victim

ransomware.liveHigh

Emperador ransomware claims Electrolux Group breach

ransomware.liveHigh

Emperador ransomware gang claims Cassias MG Government as new victim

ransomware.liveHigh

Emperador ransomware gang publishes Westbridge Institute of Technology as victim

ransomware.liveHigh

Emperador ransomware gang publishes RDA Motors S.P.A. as victim

ransomware.liveHigh

Emperador ransomware gang publishes SEVENOAKS s.r.o. as victim

ransomware.liveHigh

Emperador ransomware gang claims Navitrans as victim

ransomware.liveHigh

Emperador ransomware claims Nexbex Solutions Private Limited victim

ransomware.liveHigh

Emperador ransomware gang publishes EASY JOB S.A.S. as victim

ransomware.liveHigh

Emperador ransomware claims Bosnia and Herzegovina Mine Action Center

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans