sign in--:--:--UTC

Payload

Reports

22

First seen

May 13

Last seen

Jun 26

Motivation

extortion, financial, financial extortion

Targeting

Sectors

manufacturing ×3other ×2healthcare ×2media entertainment ×1financial services ×1government ×1hospitality ×1transportation logistics ×1

Victim regions

United States ×2Malaysia ×2Brazil ×1Switzerland ×1Vietnam ×1Germany ×1Ireland ×1Japan ×1

Top ATT&CK techniques

T1566 Phishing ×1T1041 Exfiltration Over C2 Channel ×1T1486 Data Encrypted for Impact ×1T1204 User Execution ×1T1078 Valid Accounts ×1T1021 Remote Services ×1T1087 Account Discovery ×1T1195 Supply Chain Compromise ×1T1190 Exploit Public-Facing Application ×1T1059 Command and Scripting Interpreter ×1

Indicators

cve ×35domain ×22

Indicator values are available on Pro and via the API.

Recent reports

Payload ransomware gang publishes Clínica La Sabana as victim

ransomware.liveJun 26 High

Payload ransomware gang publishes Software Arge as victim

ransomware.liveJun 26 High

Payload ransomware gang publishes Mosaic Partners as victim

ransomware.liveJun 26 High

Payload ransomware gang claims ENB Versicherungen victim

ransomware.liveJun 20 High

Payload ransomware gang publishes Editora Irmãos Vitale as victim

ransomware.liveJun 20 High

Payload ransomware gang claims Qualiflex Solutions victim

ransomware.liveJun 20 High

Payload ransomware gang claims Preferred Properties as new victim

ransomware.liveJun 20 Medium

Payload ransomware claims SPORTON International Inc. as victim

ransomware.liveJun 16 High

Payload ransomware gang publishes myipo.gov.my as victim

ransomware.liveJun 13 Medium

Payload ransomware gang claims Plaza Lama as victim

ransomware.liveJun 8 High

Payload ransomware gang claims Hansoll Textile victim in Vietnam

ransomware.liveJun 8 High

Payload ransomware gang publishes Villea Hotels as victim

ransomware.liveJun 8 High

Weekly Cyber Recap: PAN-OS Exploit, Gogs RCE, GlassWorm C2 Takedown, AI-Driven Attacks

The Hacker NewsJun 1 High

Payload ransomware gang publishes G Theodor Freese as victim

ransomware.liveMay 21 High

Payload ransomware gang publishes A-Sonic Logistic Solutions as victim

ransomware.liveMay 21 High

Payload ransomware group publishes Internal Medicine and Pediatrics of Cullman as victim

ransomware.liveMay 21 Medium

Payload ransomware gang claims new victim: Robinsons

ransomware.liveMay 21 Medium

Payload ransomware gang claims Tang Seng Nitrogen & Pump Systems as new victim

ransomware.liveMay 19 High

Payload ransomware gang claims Elohim Law Corporation as victim

ransomware.liveMay 19 High

Payload ransomware gang claims Kabushiki Gaisha Hodozuka Setsubi as victim

ransomware.liveMay 19 High

Payload ransomware gang claims Gorey Community School victim

ransomware.liveMay 13 High

Payload ransomware gang claims four Malaysian companies as victims

ransomware.liveMay 13

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans