Panzer

☆ pin
Reports
44
First seen
Aug 5, 2026
Last seen
Oct 13, 2026
Motivation
Financial

Relationships

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Victim regions
×1
×3
Indonesia×3
Germany×3
Spain×2
France×2
European Union×1
Switzerland×1
Nigeria×1
Thailand×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1566 Phishing ×1T1041 Exfiltration Over C2 Channel ×1T1505.003 Web Shell ×1T1195 Supply Chain Compromise ×1T1190 Exploit Public-Facing Application ×1T1555 Credentials from Password Stores ×1T1486 Data Encrypted for Impact ×1T1204 User Execution ×1T1059.001 PowerShell ×1T1547 Boot or Logon Autostart Execution ×1

Indicators

cve ×95domain ×49hash_sha1 ×1ip_v4 ×1

Indicator values are available on Pro and via the API.

Associated CVEs

Recent reports

Medium

Panzer ransomware gang publishes Valode & Pistre as victim

ransomware.live
High

Panzer ransomware gang publishes Zenidoc as victim

ransomware.live
High

Panzer ransomware gang claims Supreme Energy as victim

ransomware.live
Medium

Panzer ransomware gang publishes solutend as new victim

ransomware.live
High

Panzer ransomware gang publishes University of Rostock as victim

ransomware.live
High

Panzer ransomware gang claims EDFelectronics breach

ransomware.live
High

Panzer ransomware gang claims SweetRush victim

ransomware.live
Medium

Panzer ransomware group publishes Paessolucoes as new victim

ransomware.live
High

Panzer ransomware publishes SMCare (Scenario Management) as victim

ransomware.live
Medium

Panzer ransomware publishes Asesoría FAR as victim

ransomware.live
High

Panzer ransomware gang publishes Ressources Si as victim

ransomware.live
Critical

Weekly Recap: Cisco ISE 0-Day, AI Agent RCE, ClickFix Attacks, Supply-Chain Breaches

The Hacker News
High

Panzer claims K3G Solutions Brazil victim on ransomware.live

ransomware.live
High

Panzer ransomware gang publishes Universität Hamburg as victim

ransomware.live
Medium

Panzer ransomware claims victim: Inovapy

ransomware.live
Medium

Panzer ransomware gang publishes victim: Stim

ransomware.live
Medium

Panzer ransomware gang publishes Nielsen Design as victim

ransomware.live
High

Panzer ransomware publishes Honda Peru victim on ransomware.live

ransomware.live
High

Panzer ransomware gang publishes Cerámicas Kantu as victim

ransomware.live
High

Panzer ransomware gang claims Konica Minolta Bulgaria as victim

ransomware.live
High

Panzer ransomware gang claims Agencia Estatal de Meteorología as victim

ransomware.live
High

Panzer ransomware gang publishes Aqualogus as new victim

ransomware.live
High

Panzer ransomware gang publishes Financière d'Uzès breach

ransomware.live
High

Panzer ransomware gang publishes KHALED ALFAGIH ENGINEERING CONSULTANCY as victim

ransomware.live
High

Panzer ransomware gang publishes Edacentrum as new victim

ransomware.live
High

Panzer ransomware gang publishes Hochschule Heilbronn Bildungscampus as victim

ransomware.live
High

Panzer ransomware publishes Dinas Komunikasi dan Informatika as victim

ransomware.live
High

Panzer ransomware gang publishes Directorate-General for Education as victim

ransomware.live
High

Panzer ransomware claims Government of Vojvodina victim

ransomware.live
High

Panzer ransomware gang publishes Senvibe as new victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.