Babuk2

tecnologias.mspz2.gob.ec ID 19320

tecenologias.mspz2.gob.ec is cataloged within the threat-intelligence index as a ransomware victim entity operating within the IT sector and linked to the country EC. The entity identifier reflects its presence in cybersecurity threat databases, where it is documented in relation to malicious activity targeting information technology infrastructure. Its classification as a ransomware victim indicates its association with a threat actor identified as babuk2, a group noted for deploying ransomware campaigns. This listing provides neutral context for threat-intelligence professionals tracking affected entities, sectors, and source attributions across regional cyber incidents. The entry serves as an authoritative reference point for understanding the entity's role within the babuk2 threat landscape without disclosing unverified incident details. ID 32965

tecnologias.mspz2.gob.ec ID 32965

tecnologias.mspz2.gob.ec ID 19320

turkish defense military ID 18945

The Turkish Defense Military is a national defense entity operating within the Public Sector in Turkey, responsible for national security, military operations, defense logistics, and protection of state assets across the nation. As a critical public infrastructure organization, it represents a high-value target for cyber threats. This listing identifies the Turkish Defense Military as a ransomware victim linked to the Babuk2 threat actor, indicating a cybersecurity incident of concern within the defense sector. The entry reflects threat-intelligence indexing without confirming specific breach details. ID 32970

turkish defense military ID 32970

turkish defense military ID 18945

rheinmetall.com (Rheinmetall Defence) ID 18944

Rheinmetall.com is the official web presence of Rheinmetall, a prominent German corporation operating within the manufacturing and engineering sectors. The entity provides defense, security, and technology solutions, with operations and research deeply embedded across industrial and engineering domains in Germany and internationally. Within the threat-intelligence index catalog, Rheinmetall.com is categorized specifically as a ransomware victim linked to the Babuk2 threat actor group. This classification reflects the cybersecurity context in which the entity was identified within the index's ransomware incident database. The listing type and associated threat actor provide critical context for threat analysts monitoring industrial sector vulnerabilities. ID 32971

rheinmetall.com (Rheinmetall Defence) ID 32971

rheinmetall.com (Rheinmetall Defence) ID 18944

gangotreehomes.com (RealEstate) ID 18941

gangotreehomes.com operates within the Construction and Real Estate sector and is situated in India. The entity represents a business organization whose infrastructure was impacted by a cyber incident. According to the threat-intelligence index, gangotreehomes.com is cataloged as a ransomware victim linked to the babuk2 threat actor. This listing type indicates that the organization experienced ransomware activity connected to babuk2, without disclosing confirmed technical details, stolen data, or financial impact. The entry serves as a reference point within the ransomware victim index for monitoring sector-specific cyber threats. ID 32973

gangotreehomes.com (RealEstate) ID 32973

gangotreehomes.com (RealEstate) ID 18941

Secret plans of Indian army ID 18940

Secret plans of Indian army refers to classified operational and strategic documentation maintained within the Indian Army's public sector infrastructure, representing sensitive national defense planning activities. As a ransomware victim entry in this threat-intelligence index, it signifies an instance where such protected governmental assets were targeted by cyber intrusion campaigns. The entity operates within the Public Sector domain of India, where defense-related systems face persistent threats from sophisticated malware families. This listing type identifies the asset as compromised under the attack profile of babuk2, a threat actor known for deploying ransomware across critical infrastructure sectors. The entry documents the association between national security-related plans and the babuk2 campaign without confirming specific breach details. ID 32974

Secret plans of Indian army ID 32974

Secret plans of Indian army ID 18940

Bangladesh Armed Forces (BangLadesh Army) ID 18939

Bangladesh Armed Forces (BangLadesh Army) is the principal land warfare branch of Bangladesh's national armed forces, operating within the country's public sector framework. The entity provides military defense, territorial security, and public safety services for Bangladesh, reflecting its role within government and national infrastructure protection. This listing type identifies Bangladesh Armed Forces as a ransomware victim entity linked to the babuk2 threat actor. The association places this public sector organization within the threat-intelligence index under ransomware incidents tied to babuk2 activity in Bangladesh. It was listed as a ransomware victim associated with babuk2. ID 32975

Bangladesh Armed Forces (BangLadesh Army) ID 32975

Bangladesh Armed Forces (BangLadesh Army) ID 18939

Saudi Arabian military and government internal center ID 18938

The Saudi Arabian military and government internal center is a Saudi Arabian institution operating within the Public Sector, supporting internal administrative, operational, and defense-related functions for military and government entities. Its role encompasses centralized coordination, data management, and institutional support services aligned with national security and governance requirements across the Kingdom. This listing identifies the entity as a ransomware victim associated with the threat actor babuk2, reflecting cybersecurity exposure within critical public infrastructure. The description remains neutral and avoids speculative claims regarding compromised assets, data exfiltration, or financial impact. Authorities and sector stakeholders monitor such incidents to strengthen resilience against evolving cyber threats targeting government and military systems in Saudi Arabia. ID 32976

Saudi Arabian military and government internal center ID 32976

Saudi Arabian military and government internal center ID 18938

Hellenic Airforce ID 18937

The Hellenic Airforce is Greece's national air force, a Public Sector organization responsible for military aviation operations, national defense support, and security-related capabilities within the country of Greece. As a Public Sector entity, it represents critical infrastructure and government-linked functions within the GR national defense framework. This listing identifies the Hellenic Airforce as a ransomware victim associated with the threat actor babuk2. The entry reflects threat-intelligence catalog data documenting the entity's relationship to this specific cyber threat actor without confirming breach details, stolen data, or operational impact. This record serves threat analysts and security professionals monitoring Public Sector ransomware incidents across GR. ID 32977

Hellenic Airforce ID 32977

Hellenic Airforce ID 18937

ezbuy.sg (Singapore Shopping) ID 18934

ezbuy.sg operates within the retail and e-commerce sector, based in Singapore. The entity is cataloged as a ransomware victim within this threat-intelligence index, with an associated threat actor identified as babuk2. The listing reflects the cybersecurity classification of the organization in relation to this threat actor without disclosing unverified incident details, such as stolen data, ransom terms, or confirmed breach specifics. This entry provides neutral, encyclopedic context for researchers and defenders assessing ransomware exposure across retail and e-commerce environments in the region. ID 32978

ezbuy.sg (Singapore Shopping) ID 32978

ezbuy.sg (Singapore Shopping) ID 18934

Iran gas service system, ID 18933

The Iran gas service system is a national energy infrastructure component responsible for gas distribution, supply coordination, metering, and operational support across Iran's energy sector. As an entity within the Energy sector of Iran, it provides essential public and commercial gas service functions, making it a critical operational asset with potential exposure to cyber incidents. This listing identifies the Iran gas service system as a ransomware victim linked to the threat actor babuk2, reflecting its inclusion in the threat-intelligence index based on associated cyber activity. The description remains neutral and avoids speculative claims regarding data theft, ransom demands, or confirmed breach details, focusing solely on the entity's sector role and its association with babuk2. ID 32979

Iran gas service system, ID 32979

Iran gas service system, ID 18933

kfar hatta medical center - Lebanon ID 18932

kfar hatta medical center - Lebanon operates within the healthcare and medicine sector, providing medical services in Lebanon. The entity is cataloged in this threat-intelligence index as a ransomware victim linked to the babuk2 threat actor. This listing type indicates a cybersecurity incident involving ransomware activity targeting a healthcare organization. The entry reflects observed threat-intelligence data concerning the entity and its association with babuk2 without detailing unverified incident specifics such as data exfiltration scope or ransom demands. The record serves to inform security professionals and stakeholders about ransomware exposure within the healthcare sector in Lebanon. ID 32980

kfar hatta medical center - Lebanon ID 32980

kfar hatta medical center - Lebanon ID 18932

Polizia italia mail access ID 18930

poliziadistato.it is an entity operating within the IT sector, specifically within Hospitality, Food & Beverage, and Tourism environments, where digital security vulnerabilities are prevalent. The domain functions as an online presence associated with operational services relevant to this sector. It is cataloged in the threat-intelligence index as a ransomware victim, with the associated threat actor and source identified as babuk2. This listing reflects the entity's documented relationship to this cyber threat within the indexed intelligence records. The description remains factual and neutral regarding the incident specifics. ID 32981

Polizia italia mail access ID 32981

Polizia italia mail access ID 18930

zalora.sg (Singapore Shopping) ID 18929

Zalora.sg operates within the retail and e-commerce sector based in Singapore, providing digital commerce solutions and customer-facing services to support business operations across Southeast Asia. As a prominent online retail platform, its infrastructure and data systems represent critical assets within the regional e-commerce landscape. This entity has been formally cataloged as a ransomware victim associated with the threat actor babuk2, reflecting the cybersecurity risks inherent to digital retail environments. The listing underscores the importance of threat intelligence monitoring for sector-specific vulnerabilities and highlights the necessity of robust defenses against evolving ransomware campaigns targeting commercial enterprises in Asian markets. This entry serves as a reference point for security professionals assessing exposure within retail and e-commerce infrastructures. ID 32982

zalora.sg (Singapore Shopping) ID 32982

zalora.sg (Singapore Shopping) ID 18929

ascires.com ID 18920

Ascires.com operates within the information technology sector and is associated with the ES region. The entity is cataloged in the threat-intelligence index under the listing type ransomware victim, specifically linked to the threat actor babuk2. This entry documents the observed relationship between Ascires.com and babuk2 within cybersecurity intelligence records. No additional incident specifics such as stolen data, record counts, ransom demands, or confirmed breach details are included in this description. The listing serves as a neutral reference point for threat actors, defenders, and intelligence consumers monitoring ransomware activity in IT environments. ID 32983

ascires.com ID 32983

ascires.com ID 18920

aosense.com - AO Sense INC. ID 18919

Aosense.com operates within the United States manufacturing and engineering sectors, providing specialized operational intelligence and monitoring services relevant to industrial workflows and supply chain integrity. The entity is cataloged in the threat-intelligence index under the designation ransomware victim, with its primary associated threat actor and source identified as Babuk2. This listing reflects the cybersecurity community's documentation of the entity's exposure within the Babuk2 threat landscape without disclosing unverified incident details. The classification underscores the importance of monitoring industrial sectors for evolving ransomware tactics and their impacts on engineering and production environments. ID 32984

aosense.com - AO Sense INC. ID 32984

aosense.com - AO Sense INC. ID 18919

dardoc.com ID 18918

dardoc.com operates within the IT sector and is situated in Denmark (DK). The entity is cataloged within this threat-intelligence index under the listing type ransomware victim, explicitly linked to the threat actor babuk2. This classification reflects the entity's documented association with this specific ransomware campaign, providing cybersecurity professionals with contextual intelligence for threat monitoring and incident response planning. The entry serves as a reference point for understanding organizational exposure within the broader landscape of cybercrime targeting IT infrastructure across European regions. No additional incident specifics, such as data stolen or ransom demands, are included per strict factual constraints. ID 32985

dardoc.com ID 32985

dardoc.com ID 18918

navy-mil-bd ID 18916

Navy-mil-bd is an entity identified within the threat-intelligence index as a ransomware victim. Operating within the military sector context and located in Bangladesh (BD), the entity represents a target profile relevant to cyber threat analysis. Its classification as a ransomware victim associated with the threat actor Babuk2 highlights its role in tracking active malware campaigns targeting specific sectors and geographies. This listing serves to catalog the entity's exposure profile without disclosing unverified incident details. The entry supports comprehensive threat intelligence monitoring and contextualizes the entity within broader cybersecurity threat landscapes. ID 32986

navy-mil-bd ID 32986

navy-mil-bd ID 18916

drdo.gov.in ID 18901

drdo.gov.in operates within the Indian information technology sector, serving governmental or public-sector digital functions based on its domain classification. The entity is documented within this threat-intelligence index under the listing type ransomware victim, specifically linked to the threat actor babuk2. Babuk2 is recognized as a malware family associated with ransomware activity targeting infrastructure across multiple regions. This entry provides neutral context for threat analysts tracking cyber incidents in India's IT sector and the associated adversary landscape. The listing reflects the entity's status as a ransomware victim connected to babuk2, without disclosing unverified incident details. ID 32987

drdo.gov.in ID 32987

drdo.gov.in ID 18901

uniproof.com.br ID 18900

uniproof.com.br is a Brazilian services-sector entity operating within the domain of professional and service-oriented business activities in Brazil. The company is cataloged in this threat-intelligence index under the designation ransomware victim, with the associated threat actor and source identified as babuk2. This listing reflects the entity's inclusion in threat-intelligence records where babuk2 activity is reported in relation to the organization. No specific incident details such as data stolen, records impacted, ransom demands, or confirmed breach scope are included, in accordance with strict factual and neutral reporting standards. The entry provides a structured overview for cybersecurity professionals monitoring ransomware exposure across service sectors in Brazil. ID 32988

uniproof.com.br ID 32988

uniproof.com.br ID 18900

(UPDATE) - whitecapcanada.com ID 18897

whitecapcanada.com operates within the Services sector and is headquartered in Canada. The entity functions as a commercial organization providing service-oriented offerings, with its inclusion in this threat-intelligence index reflecting its status as a ransomware victim. Its listing is specifically associated with the threat actor babuk2, a malware family historically targeting service and enterprise environments. This catalog entry documents the correlation between the entity and the identified threat actor without disclosing unverified incident details. The record serves threat analysts to contextualize potential attack surfaces and monitor subsequent intelligence developments related to this organization and its associated ransomware threat. ID 32989

(UPDATE) - whitecapcanada.com ID 32989

(UPDATE) - whitecapcanada.com ID 18897

pln.co.id - PLN INDONESIA ID 18861

pln.co.id is an entity operating within the IT sector located in Indonesia. Its domain and operational profile align with technology services and infrastructure management within the country's digital economy. Within threat-intelligence indexing frameworks, this entity is formally categorized as a ransomware victim. The association with threat actor babuk2 indicates its inclusion in records documenting ransomware activity targeting IT-focused organizations. This listing provides neutral context for analysts monitoring cyber threats and incident correlations across sectors and geographies. ID 32990

pln.co.id - PLN INDONESIA ID 32990

pln.co.id - PLN INDONESIA ID 18861

moh.gov.rw ID 18860

moh.gov.rw is the official domain of the Ministry of Health within the Republic of Rwanda, representing a public sector entity responsible for national health administration, policy, and service delivery. Operating within the Public Sector in country RW, the entity provides essential governmental health functions and infrastructure. This listing identifies moh.gov.rw as a ransomware victim associated with the threat actor babuk2. The entry reflects threat-intelligence indexing of this entity within the context of cyber incidents targeting public infrastructure. No specific breach details, data stolen, or ransom terms are included per strict factual reporting guidelines. ID 32991

moh.gov.rw ID 32991

moh.gov.rw ID 18860

iDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers ID 18795

iDRAC, the Integrated Dell Remote Access Controller management interface for Dell servers, provides remote administration, hardware monitoring, firmware management, and security configuration capabilities for enterprise IT infrastructure. It enables administrators to manage server operations, diagnose hardware issues, apply updates, and enforce access controls across Dell server fleets within the IT sector. In this catalog entry, the interface is documented as a ransomware victim associated with babuk2, a threat actor operating from the United States. This listing reflects the entity's exposure within threat-intelligence indexing without confirming specific breach details, data loss, or operational impact. The description focuses on the management interface's role and its association with the identified threat actor for catalog and intelligence purposes. ID 32993

iDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers ID 32993

iDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers ID 18795

elsoms.com ID 18782

elsoms.com operates within the Services sector and is headquartered in the United Kingdom. The entity provides professional services, though specific service offerings are not disclosed in public threat-intelligence records. It has been formally listed within the threat-intelligence index as a ransomware victim associated with the threat actor babuk2. This designation reflects the cybersecurity context in which the entity was identified, without confirming specific intrusion details or operational impact. The listing serves to inform analysts tracking ransomware campaigns and related threat actor activity across sectors and geographies. ID 32994

elsoms.com ID 32994

elsoms.com ID 18782

brune.com.br - Group MC (conglomerate) ID 18781

brune.com.br is a services-sector company based in Brazil (country: BR), operating within the broader digital and professional services marketplace. The entity is cataloged in this threat-intelligence index under the listing type ransomware victim, linked to the associated threat actor babuk2. This classification reflects the inclusion of brune.com.br within the ransomware incident dataset tied to babuk2 activity, without disclosing unverified details regarding breach scope, data accessed, or operational impact. The entry provides neutral, authoritative context for researchers and defenders monitoring service-sector entities in Brazil against ransomware threats. brune.com.br was listed as a ransomware victim associated with babuk2. ID 32995

brune.com.br - Group MC (conglomerate) ID 32995

brune.com.br - Group MC (conglomerate) ID 18781