Payload

☆ pin

Reports

First seen

May 13, 2026

Last seen

Aug 13, 2026

Motivation

Financial

Relationships

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Sectors

Manufacturing ×5 Government ×2 Healthcare ×2 Financial Services ×2 Other ×2 Professional Services ×2 Media & Entertainment ×2 Transport & Logistics ×1

Victim regions

×1

×3

Germany×3

United States×2

Switzerland×2

Malaysia×2

France×1

Brazil×1

Vietnam×1

Ireland×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1566 Phishing ×1T1041 Exfiltration Over C2 Channel ×1T1195 Supply Chain Compromise ×1T1190 Exploit Public-Facing Application ×1T1486 Data Encrypted for Impact ×1T1204 User Execution ×1T1078 Valid Accounts ×1T1021 Remote Services ×1T1087 Account Discovery ×1T1059 Command and Scripting Interpreter ×1

Indicators

cve ×35domain ×34

Indicator values are available on Pro and via the API.

Recent reports

Medium

Payload

Relationships

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Payload ransomware gang publishes Zara Investment Holding as victim

Payload ransomware gang publishes B&B Hydraulik as victim

Payload ransomware gang publishes Stücheli Architekten as victim

Payload ransomware gang publishes Baya Technologies as victim

Payload Ransomware Gang Claims Hans & Jos. Kronenberg GmbH Breach

Payload ransomware group claims new victim: CKR Consulting Engineers

Payload ransomware gang publishes Roofinox as victim

Payload ransomware gang claims compromise of French commune of Castries

Payload ransomware gang publishes ENB Versich as victim

Payload ransomware gang claims new victim: Vela Film S.r.l.

Payload ransomware gang claims new victim: Tofutown

Payload ransomware gang publishes Villea Hotels as victim

Payload ransomware gang publishes Clínica La Sabana as victim

Payload ransomware gang publishes Software Arge as victim

Payload ransomware gang publishes Mosaic Partners as victim

Payload ransomware gang claims ENB Versicherungen victim

Payload ransomware gang publishes Editora Irmãos Vitale as victim

Payload ransomware gang claims Qualiflex Solutions victim

Payload ransomware gang claims Preferred Properties as new victim

Payload ransomware claims SPORTON International Inc. as victim

Payload ransomware gang publishes myipo.gov.my as victim

Payload ransomware gang claims Plaza Lama as victim

Payload ransomware gang claims Hansoll Textile victim in Vietnam

Payload ransomware gang publishes Villea Hotels as victim

Weekly Cyber Recap: PAN-OS Exploit, Gogs RCE, GlassWorm C2 Takedown, AI-Driven Attacks

Payload ransomware gang publishes G Theodor Freese as victim

Payload ransomware gang publishes A-Sonic Logistic Solutions as victim

Payload ransomware group publishes Internal Medicine and Pediatrics of Cullman as victim

Payload ransomware gang claims new victim: Robinsons

Payload ransomware gang claims Tang Seng Nitrogen & Pump Systems as new victim