Signalis
sign in--:--:--UTC
Threat actors

Settra

☆ pin
Reports
89
First seen
Jun 28, 2026
Last seen
Oct 9, 2026
Motivation
Financial

Targeting

Sectors
Other ×10Manufacturing ×8Retail & E-commerce ×8Professional Services ×5Transport & Logistics ×4Technology ×3Agriculture ×3Media & Entertainment ×3
Victim regions
×1
×30
United States×30
United Kingdom×3
Netherlands×2
Mexico×2
Australia×2
Portugal×1
Taiwan×1
South Korea×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×3T1078 Valid Accounts ×2T1133 External Remote Services ×2T1110 Brute Force ×2T1219 Remote Access Software ×2T1490 Inhibit System Recovery ×2T1566 Phishing ×2T1059 Command and Scripting Interpreter ×1T1562.001 Impair Defenses: Disable or Modify Tools ×1T1498 Network Denial of Service ×1T1070.001 Indicator Removal: Clear Windows Event Logs ×1T1190 Exploit Public-Facing Application ×1

Indicators

domain ×138ip_v4 ×48hash_md5 ×16hash_sha256 ×16filename ×6cve ×3hash_sha1 ×3bitcoin_address ×2

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2026-20079 (exploited)CVE-2026-20316 (exploited)CVE-2026-59310 (exploited)

Recent reports

High

Settra ransomware gang publishes North Shore Sun as victim

ransomware.liveHigh

Settra ransomware gang publishes windor.com as victim

ransomware.liveHigh

Settra ransomware gang claims Holly Poultry as victim

ransomware.liveMedium

Settra ransomware gang publishes www.windor.com as victim

ransomware.liveHigh

Settra publishes Translarity.com as ransomware victim

ransomware.liveHigh

Settra ransomware gang publishes Baltimore Freightliner as victim

ransomware.liveHigh

Settra ransomware gang publishes Golden Pear Funding as victim

ransomware.liveHigh

Settra ransomware gang claims mcpolymers.com victim

ransomware.liveHigh

Settra ransomware publishes DFI Retail Group as victim

ransomware.liveHigh

Settra ransomware gang claims Vestfrost Solutions victim

ransomware.liveHigh

Settra ransomware publishes Universal Auto Group as victim

ransomware.liveHigh

Settra ransomware claims victim: namtheun2.com

ransomware.liveHigh

Settra ransomware group claims Lake Beverage victim

ransomware.liveMedium

Settra ransomware gang publishes Quantum Marketing Group as new victim

ransomware.liveHigh

Settra ransomware publishes Moscone victim

ransomware.liveHigh

Settra ransomware claims Greg Jones & Associates, P.A.

ransomware.liveHigh

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

The Hacker NewsHigh

Settra ransomware gang publishes rottner-tresor.at as victim

ransomware.liveHigh

Settra ransomware gang publishes naturesplus.com as victim

ransomware.liveHigh

Settra publishes Pacific Absolute Building Services as ransomware victim

ransomware.liveHigh

Settra publishes fchhotels.com as new ransomware victim

ransomware.liveMedium

Settra ransomware group publishes budgetms.com as victim

ransomware.liveHigh

Settra ransomware gang claims sym.com.mx victim

ransomware.liveHigh

Settra Ransomware Deploys MeshAgent RMM in Post-Compromise Activity

Huntress BlogMedium

Settra ransomware gang publishes ialegre.com victim

ransomware.liveHigh

Settra ransomware claims Verve Portraits as new victim

ransomware.liveHigh

Settra ransomware gang claims new victim: DiaSorin

ransomware.liveHigh

Settra ransomware gang publishes hansler.com as victim

ransomware.liveHigh

Settra ransomware gang publishes HV Law Firm as victim

ransomware.liveMedium

Settra ransomware gang publishes teletekstructures.com as victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans