Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
1056
- Leaked 15 1.4%
- Pending 1041 98.6%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 3h ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
| Leak location 2 | Onion service | Down checked 3h ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
Top Activity Sectors (21)
- IT 160
- Manufacturing / Engineering 124
- Communication / Marketing 89
- Healthcare / Pharma 85
- Services 78
- Retail / E-commerce 72
- Finance / Legal / Insurance 58
- Construction / Real Estate 50
- Transportation / Travel / Logistics 33
- Not identified 33
- Agriculture / Food 30
- Education 29
- Public Sector 21
- Energy 19
- Hospitality / Food & Beverage / Tourism 14
- NGOs / Associations 13
- Telecommunications 8
- null 3
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (17)
▼How Thegentlemen typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via The Gentlemen.
-
T1583.001 Domains Resource Development
What they do: The Gentlemen has maintained a TOR Data Leak Site (DLS) to post stolen victim data.
What that means: Adversaries may acquire domains that can be used during targeting.
-
T1585 Establish Accounts Resource Development
What they do: The Gentlemen and its affiliates have leveraged Tox to communicate with victims.
What that means: Adversaries may create and cultivate accounts with services that can be used during targeting.
-
T1585.001 Social Media Accounts Resource Development
What they do: The Gentlemen has established social media accounts on X.
What that means: Adversaries may create and cultivate social media accounts that can be used during targeting.
-
T1588.002 Tool Resource Development
What they do: The Gentlemen has provided a custom EDR killing tool called GentleKiller and other like software that abuse vulnerable drivers via the Bring Your Own Vulnerable Driver (BYOVD) technique to their affiliates that attempts to disable EDR solutions.
What that means: Adversaries may buy, steal, or download software tools that can be used during targeting.
-
T1683.001 Written Content Resource Development
What they do: The Gentlemen has utilized branded code and ransom notes.
What that means: Adversaries may create or tailor written materials to support targeting and malicious operations.
-
T1683.002 Audio-Visual Content Resource Development
What they do: The Gentlemen has leveraged a branded graphic that is placed on the systems desktop wallpaper that symbolizes the association of malicious activity to the group.
What that means: Adversaries may create or manipulate audio, image, and video content to support targeting and malicious operations.
-
What they do: The Gentlemen has leveraged compromised user credentials to gain access to victim hosts.
What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1190 Exploit Public-Facing Application Initial Access
What they do: The Gentlemen has exploited vulnerable public-facing devices and services to gain access to victim environments.
What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
-
T1068 Exploitation for Privilege Escalation Privilege Escalation
What they do: The Gentlemen has assisted affiliates with gaining privilege escalation through the use of BYOVD.
What that means: Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
-
T1027.002 Software Packing Stealth
What they do: The Gentlemen has packed The Gentlemen Ransomware binaries utilizing either Themida or Enigma to obfuscate the malicious payloads.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1036 Masquerading Stealth
What they do: The Gentlemen has fabricated the version information of payload files to evade detection.
What that means: Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.
-
T1036.001 Invalid Code Signature Stealth
What they do: The Gentlemen has copied digital signatures from legitimate executables in attempts to circumvent detection.
What that means: Adversaries may attempt to mimic features of valid code signatures to increase the chance of deceiving a user, analyst, or tool.
-
T1036.005 Match Legitimate Resource Name or Location Stealth
What they do: The Gentlemen has named The Gentlemen Ransomware payload files to resemble well-known software vendors to include security vendors.
What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
-
T1018 Remote System Discovery Discovery
What they do: The Gentlemen has utilized internal network scanning tools to enumerate additional hosts in the victim environment to include Advanced IP Scanner.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1219.002 Remote Desktop Software Command and Control
What they do: The Gentlemen has relied on remote access tools, such as AnyDesk, as a means of maintaining access to victim environment.
What that means: An adversary may use legitimate desktop support software to establish an interactive command and control channel to target systems within networks.
-
T1486 Data Encrypted for Impact Impact
What they do: The Gentlemen has used The Gentlemen Ransomware to encrypt victim’s data.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1657 Financial Theft Impact
What they do: The Gentlemen has used double-extortion tactics to sway victims to pay a ransom to include exfiltrating sensitive data, encrypting files, and threatening public release if a payment is not received.
What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.
Tools Observed (64)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DumpBrowserSecrets
KslKatz
Mimikatz
Defense evasion
EDRStartupHinder
KslDump
PowerRun
RedSun
ThrottleStop driver (BYOVD)
Discovery
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
MANSPIDER
Nmap
PrivHound
RelayKing-Depth
Shodan
SoftPerfect NetScan
TaskHound
Discovery & enumeration
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
Nmap
MANSPIDER
PrivHound
RelayKing-Depth
Shodan
TaskHound
Exfiltration
RClone
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
Amnezia VPN
Chisel
Cloudflared
OpenVPN
Proxychains
PuTTY
Wireguard VPN
OpenSSH
OffSec
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
Offensive security tooling
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
RMM Tools
AnyDesk
FreeRDP
MeshAgent
Remote monitoring & management
AnyDesk
FreeRDP
MeshAgent
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Dark Eye.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1056)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 1001–1056 of 1056.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | AkroStar Technology Co., Ltd. Akrostar id23938 View details | Switzerland | IT | pending | ||
|
www.akrostar-tech.com AkroStar was founded in June 2020 and is a leading Chinese enterprise specializing in advanced interface IP. We are committed to the research and development of domestically produced advanced interface IP and breaking through “bottleneck” technologies. AkroStar offers comprehensive high-speed interface IP solutions, including PCIe, Serdes, DDR, D2D, USB, MIPI, HDMI, SATA, SD/eMMC, etc., covering a full-stack complete IP solution compliant with the latest protocol standards. https://www.crunchbase.com/organization/akrostar |
||||||
| Ransomware | A***-****.com id23937 View details | — | Other | pending | ||
|
🇨🇳 Semiconductor industry |
||||||
| Ransomware | ************.com id23929 View details | — | Other | pending | ||
|
🇨🇳 Semiconductor industry |
||||||
| Ransomware | United Enterprise Fund id23927 View details | United States | Communication / Marketing | pending | ||
|
https://www.zoominfo.com/c/united-enterprise-fund-lp/104726614 www.unitedenterprisefund.com United Enterprise Fund is a New Yorkbased financial services firm that delivers personalized investment management and advisory solutions. The company specializes in helping clients pursue long-term financial objectives through strategic investment planning and risk management. Operating from the heart of the financial district, United Enterprise Fund combines tailored planning with market insight to support sustainable financial outcomes. |
||||||
| Ransomware | *******.com id23825 View details | — | Other | pending | ||
|
http://25swr3rgce7elyedjmmhdw4ourgtxc72mj2cynsrqz6wwitestfpiiyd.onion/ |
||||||
| Ransomware | DRD Communications id23651 View details | United States | Communication / Marketing | pending | ||
|
https://www.zoominfo.com/c/drd-software-and-systems-india-private-ltd/372534475 www.drd.co.in DRD India is a telecommunications and software development company with over 25 years of experience, dedicated to rejuvenating the telecommunications channel. They offer products and services such as Uboss, a cloud trading platform, and VanillaIP, a white label channel provider for the UK market. The company is committed to continuous development and innovation, ensuring high-quality solutions for their clients. DRD India caters to a wide audience, having successfully served millions of users over the years. |
||||||
| Ransomware | St Stephen's International id23592 View details | Thailand | Education | pending | ||
|
www.sis.edu https://www.zoominfo.com/c/st-stephens-international-school/1293733677 St Stephen's International School offers educational programs at its Bangkok and Khao Yai campuses, catering to a diverse student population. The school provides weekend schooling and various camps for groups, aiming to enhance the educational experience. It is associated with several organizations including Ocean Glass, Ocean Property, and Bandara Group. The institution focuses on fostering an international learning environment for its students. |
||||||
| Ransomware | Silverlake Axis id23515 View details | Malaysia | IT | pending | ||
|
Stock Symbol 5CP www.silverlakeaxis.com https://www.zoominfo.com/c/silverlake-axis-ltd/259457307 Silverlake Axis Ltd. ("SAL") is a leading enterprise technology, software and services company focused on financial services and serves 40% of the top 20 largest banks in South East Asia. Founded in 1989, SAL has an impeccable track record of successful delivery of innovative and transformative solutions to its enterprise customers and their ecosystems. The Group has more than 380 enterprise customers in over 80 countries across Asia, Europe, Middle East, Africa and the Americas. Under Axis Systems Holdings Limited, SAL was listed on the SGX-SESDAQ on 12 March 2003. It was renamed Silverlake Axis Ltd in 2006 and the listing was transferred to the Mainboard of the Singapore Exchange on 22 June 2011. |
||||||
| Ransomware | Donacoop (VinaCapital) id23352 View details | Viet Nam | Construction / Real Estate | pending | ||
|
https://www.zoominfo.com/c/vinacapital/345647395 DonaCoop is a major Vietnamese conglomerate based in Dong Nai province that evolved from agricultural and handicraft cooperatives into large-scale real estate and infrastructure development acting as a key investor in metro line extension projects with VinaCapital and developing major projects like Dong Nai Waterfront City in partnership with Keppel Land while also participating in philanthropic efforts such as donating. |
||||||
| Ransomware | PT Pupuk Iskandar Muda id23278 View details | Indonesia | Agriculture / Food | pending | ||
|
www.pim.co.id https://www.zoominfo.com/c/pt-pupuk-iskandar-muda/372769605 PT Pupuk Iskandar Muda is a chemical manufacturing company based in Lhokseumawe, Aceh. As a subsidiary of PT PIHC, they focus on producing two key agricultural products: urea and ammonia fertilizers. Their factory helps farmers across Indonesia grow better crops by creating high-quality chemical fertilizers that improve soil nutrition and support agricultural productivity. |
||||||
| Ransomware | Madagascar Airlines id23183 View details | Madagascar | Transportation / Travel / Logistics | pending | ||
|
https://www.zoominfo.com/c/madagascar-airlines/1311973684 www.madagascarairlines.com Madagascar Airlines offers regular flights to major cities in Madagascar from Antananarivo, providing an online booking platform for travelers. The airline features a range of services including real-time flight schedules, special offers, and additional travel options such as cargo transport. Their clientele includes both local and international travelers looking to explore Madagascar and its surrounding regions. With a focus on customer service and travel comfort, Madagascar Airlines aims to deliver an unforgettable travel experience. |
||||||
| Ransomware | ICET Studios id23099 View details | Italy | Communication / Marketing | pending | ||
|
www.icetstudios.com All'interno delle proprie strutture la ICET Studios dispone di personale qualificato in tutte le attività legate alla realizzazione di scenografie (falegnami, pittori, decoratori, fabbri, elettricisti e montatori) e di personale esperto nelle problematiche di progettazione e gestione delle produzioni cinetelevisive e pubblicitarie, nonché nell'organizzazione e gestione di eventi e fiere. È in grado di fornire ai clienti un servizio "chiavi in mano" e di operare sia in Italia sia all'estero. |
||||||
| Ransomware | Personal Collection id22912 View details | Philippines | Communication / Marketing | pending | ||
|
www.personalcollection.com.ph https://www.zoominfo.com/c/personal-collection-direct-selling-inc/425847676 Revenue $548.9 Million Personal Collection is a direct selling company that offers high-quality products and livelihood opportunities through its dealership network. The company enables individuals to start their own businesses from home, providing them with the necessary tools and support. Their product range includes various lifestyle items, and they emphasize earning potential for their dealers. Personal Collection aims to empower clients by facilitating entrepreneurship and promoting sustainable living. Thanks to 2go.com.ph for access! |
||||||
| Ransomware | Seguros la Cmara id22870 View details | Argentina | Finance / Legal / Insurance | pending | ||
|
https://www.zoominfo.com/c/seguros-la-cmara/450079802 www.seguroslacamara.cl Corredora de Seguros La Cámara offers a wide range of insurance products, including construction insurance, life insurance, personal insurance, and general insurance. The company serves a diverse clientele, including individuals and businesses, with services tailored to personal and commercial needs. They provide additional support in areas such as medical expenses, home insurance, and travel assistance. The company emphasizes customer safety and security, ensuring clients feel secure from the first day. |
||||||
| Ransomware | 2GO Group id22815 View details | Philippines | Transportation / Travel / Logistics | pending | ||
|
Stock Symbol 2GO www.2go.com.ph https://www.zoominfo.com/c/2go-group-inc/372139552 https://en.wikipedia.org/wiki/2GO_Group 2GO Group, Inc. (2GO) is a leading Philippine logistics and transportation solutions provider, majority-owned by SM Investments Corp. with Trident Investments as another key shareholder. The company offers a broad range of services including domestic sea freight, passenger travel, courier and parcel delivery, project logistics, freight forwarding, specialized container transport (ISO tanks, temperature-controlled units), express and last-mile delivery, warehousing, inventory management, and nationwide cargo drop-off through retail outlets. As of 2025, 2GO operates a fleet of nine vessels—eight RoRo/RoPax ships and one freighter—linking 19 ports across Luzon, Visayas, and Mindanao, with major operational hubs in Manila, Cebu, Iloilo, Bacolod, and Cagayan de Oro. |
||||||
| Ransomware | AUSA Soluciones Logisticas id22796 View details | Argentina | Transportation / Travel / Logistics | pending | ||
|
https://www.zoominfo.com/c/ausa-soluciones-logisticas-sa/405951553 www.ausa.com.pe Somos AUSA, uno de los operadores logísticos líderes en el sector con más de 35 años de experiencia en la simplificación de las operaciones de comercio internacional. Iniciamos nuestras operaciones brindando el servicio de Aduanas, pero en el transcurso de los años hemos complementado nuestra oferta, lo cual nos ha convertido en un operador capaz de ofrecer todos los servicios de la cadena logística local e internacional: Seguimiento Pre-Embarque, Forwarding, Agenciamiento Aduanero, Transporte y Almacenes, y Distribución. AUSA Soluciones Logisticas SA is a company that operates in the Freight & Logistics Services industry. It employs 500to999 people and has 25Mto50M of revenue. The company is headquartered in Lima, Lima Province, Peru. |
||||||
| Ransomware | Astra Otoparts / PT. Inti Ganda Perdana id22789 View details | Indonesia | Manufacturing / Engineering | pending | ||
|
Stock Symbol AUTO.JK www.astra-otoparts.com http://www.igpgroup.astra.co.id https://www.zoominfo.com/c/pt-astra-otoparts-tbk/344291036 https://rocketreach.co/pt-inti-ganda-perdana-profile_b5c1ba2ff42e08d3 20 billion USD revenue. Astra Otoparts is an Indonesia-based manufacturing company. The Company is engaged in the trading of automotive components for domestic and international markets, including other Asian countries, the Middle East and Africa. It is also engaged in the manufacture of metal, automotive components and plastics. PT. Inti Ganda Perdana mainly manufactures rear axle and propeller shafts, and has decided on its mission to become a reliable drive shaft and drive axle manufacturer, with a vision to become a company with competitive advantage on the global market. |
||||||
| Ransomware | Al-Babtain Power & Telecommunication id22652 View details | Saudi Arabia | Telecommunications | pending | ||
|
Stock Symbol 2320. www.al-babtain.com.sa http://www.albabtain-egypt.com/ Al-Babtain Power & Telecom was established as a family run business in 1955. Over the decades, Al-Babtain has expanded into different countries and diversified into different industries. Here is a map of our journey to become one of the top 100 companies in Saudi Arabia. Al Babtain Power & Telecommunication (ABP&T) was founded in 1955. It is one of the largest manufacturers and suppliers in the field of outdoor lighting, Transmission & Distribution & Telecommunication Footprints. |
||||||
| Ransomware | Thai Future Inc. PCL id22604 View details | Thailand | Communication / Marketing | pending | ||
|
Stock symbol TFI. https://www.pm-groups.com/en/tfi.php https://thaifutureinc.com https://www.zoominfo.com/c/thai-film-industries-public-company-ltd/346313029 Thai Future Incorporation (TFI) was originally established under the name of Rachadachai O.P.P. Co., Ltd. on March 3, 1983. It was Thailand's and Southeast Asia's first BOPP film manufacturing facility to supply a fast-growing packaging industry, local and overseas. Thai Film Industries specializes in the production and distribution of films in Thailand. The company offers a range of services including film production, post-production, and marketing. Their intended clients include filmmakers, distributors, and audiences interested in Thai cinema. With a focus on promoting local talent and stories, they aim to enhance the visibility of Thai films both domestically and internationally. |
||||||
| Ransomware | Cadisa id22548 View details | Guatemala | Communication / Marketing | pending | ||
|
www.cadisa.mx https://www.zoominfo.com/c/cadisa-sa/455575374 Cadisa is a comprehensive service provider specializing in the sale and maintenance of trucks for various industries, offering a wide array of truck models including LT, CT, MV, HV, and City series. They provide original diesel spare parts, tailored maintenance plans, and 24/7 assistance, ensuring customers receive support throughout the truck's lifecycle. Their services also include a dedicated monitoring platform for real-time vehicle tracking and roadside assistance for unexpected repairs. Cadisa prioritizes customer satisfaction by ensuring that clients have access to expert advice and quality services to keep their trucks operational. |
||||||
| Ransomware | ARMONIA MEDICAL S.A.S. id22454 View details | Colombia | Communication / Marketing | pending | ||
|
Armonia Medical S.A.S es una empresa en Colombia, con sede principal en Santa Marta. Opera en Servicios de Salud Móviles sector. La empresa fue fundada en 24 de febrero de 2012. Actividades de la práctica médica sin internación, Peluquería y otros tratamientos de belleza, Comercio al por menor de productos farmacéuticos y medicinales cosméticos y artículos de tocador en establecimientos especializados https://armoniaips.com |
||||||
| Ransomware | Instituto Socio-Económico Comunitario (INSEC) id22442 View details | Nepal | Services | pending | ||
|
INSEC offer integrated services, educational tools, and multi-sector partnerships through programs focused on economic development, community development, employment training, and integrated support services. Their mission is to transform lives and strengthen communities by providing workshops, grants, and direct assistance to those in need. INSEC aims to be a leading organization in community services, developing innovative programs that make a tangible impact. https://insec.org/ |
||||||
| Ransomware | SV-Büro Ing. Schulz GmbH id22418 View details | Germany | Transportation / Travel / Logistics | pending | ||
|
Seit vielen Jahren befassen wir uns als erfolgreiches Unternehmen mit der Gutachtenerstellung in den Bereichen KFZ, LKW, Zweirad, Oldtimer, Sondermaschinen, Transportschäden, Havarie, Verpackungsbeurteilung, Wasserfahrzeugen sowie Schäden an Verkehrsleiteinrichtungen. Ebenfalls ist unser Unternehmen spezialisiert auf Großschäden im KFZ-Bereich (Hagelschlag, Hochwasser), Schadenregulierung, Regressabwicklung sowie Seminare zum Thema Ladungssicherung nach VDI 2700a. Weiters garantiert unser firmeneigenes Qualitätsmanagement, zertifiziert nach EN ISO 9001:2008, dass die Qualitätsstandards unserer Auftraggeber strikt eingehalten werden. |
||||||
| Ransomware | Cervantes id22226 View details | Argentina | Communication / Marketing | pending | ||
|
https://www.cervantes.edu.ar , Con una gran trayectoria como referentes en la educación privada de Córdoba, Cervantes mantiene el compromiso de adaptar su propuesta educativa a las necesidades del contexto actual. Hoy, más de 2 mil estudiantes eligen pertenecer a la #ComunidadIC, esta casa de estudios que apuesta constantemente a la innovación educativa. |
||||||
| Ransomware | Ceres id22225 View details | Uruguay | Communication / Marketing | pending | ||
|
www.ceres-uy.org , ceres.uy , https://www.zoominfo.com/c/ceres/458476148 ¿Qué es CERES? CERES (Centro de Estudios de la Realidad Económica y Social) es un centro de investigación independiente y sin fines de lucro, dedicado al análisis económico de las economías de América Latina, al diseño de políticas públicas y a promover su debate a nivel local y en foros internacionales. Visión Por un crecimiento con igualdad de oportunidades. Misión Contribuir a generar y debatir una agenda de políticas públicas capaces de promover el desarrollo económico y social en América Latina, mediante un trabajo de investigación y análisis innovador e independiente |
||||||
| Ransomware | BIOLAP Soluciones Médicas id22224 View details | Mexico | Healthcare / Pharma | pending | ||
|
www.biolapsa.com , https://www.zoominfo.com/c/biolap-soluciones-me%CC%81dicas/439166866 , Biolap Soluciones Médicas is a company specializing in the marketing of surgical medical supplies with over 15 years of experience in the market. They aim to be recognized as the best provider of differentiated quality services and high-tech products in the medical device sector. Their vision is to provide healthcare professionals with high-quality medical solutions and innovations that enhance patient well-being. Their mission focuses on improving patient lives by offering the highest quality instruments and equipment to healthcare providers |
||||||
| Ransomware | Proplastics id22223 View details | Zimbabwe | Manufacturing / Engineering | pending | ||
|
www.proplastics.co.zw , https://www.zoominfo.com/c/proplastics-ltd/395663229 Proplastics is a leading supplier of world class plastic pipe systems for water and sewer reticulation to SouthernAfrica. Established in 1965, Proplastics has 50 years of experience in the industry and has grown and evolved on the back of its philosophy of constant and never ending improvement to become the leading player in Zimbabwe with a significant market share in the SADC region. |
||||||
| Ransomware | Kandeo id22222 View details | Colombia | Services | pending | ||
|
www.kandeofund.com , https://diaphanum.pe/ , https://www.zoominfo.com/c/kandeo/355444055 Kandeo is focused on providing innovative solutions to enhance growth for businesses. Their product offerings are designed to empower companies to achieve brilliance in their operations. The intended clients range from small startups to large corporations seeking to optimize their business strategies. By leveraging advanced technologies, Kandeo aims to drive success and foster sustainable development. |
||||||
| Ransomware | Ransomware Recover Indonesia id22221 View details | Indonesia | IT | pending | ||
|
https://recoveryransomwareindonesia.com Gentlemen, if you want to waste your time, test our cryptographic strength, and spend your money—go ahead and contact Ransomware Recover Indonesia. Tested with our own software – pwn3d! |
||||||
| Ransomware | JN Aceros id22220 View details | Colombia | Other | pending | ||
|
www.jnaceros.com.pe, https://www.zoominfo.com/c/jn-aceros/455686474, JN Aceros is a company that operates in the HR & Staffing industry. It employs 50to99 people and has 100MMto250M of revenue. The company is headquartered in San Luis, Lima region, Peru. |
||||||
| Ransomware | Flexofast Indonesia id22219 View details | Indonesia | Communication / Marketing | pending | ||
|
www.flexofast.com , https://www.zoominfo.com/c/flexofast-indonesia/556142095 , Flexofast serves as a premier logistics partner for brands and companies in Indonesia, providing innovative and customized solutions to enhance their operational capabilities. The company emphasizes fast, reliable, and sustainable logistics services, aligning with its commitment to reducing environmental impact. It offers cutting-edge logistics, connecting shippers with transporters, and manages transactions across various marketplaces. Additionally, Flexofast functions as a digital marketing and social commerce agency, specializing in content strategy and short-form video production. |
||||||
| Ransomware | Del Campo Supreme id22218 View details | United States | Communication / Marketing | pending | ||
|
delcampo-com-mx.dynalias.com , https://www.zoominfo.com/c/del-campo-supreme-inc/17516142 On-site daycare, schooling and health programs are just a few of the things Del Campo provides for their employees |
||||||
| Ransomware | Cremona Inoxidable id22217 View details | Argentina | Communication / Marketing | pending | ||
|
www.creminox.com , https://www.zoominfo.com/c/cremona-inoxidable-sa/359162083 Cremona Inoxidable S.A. specializes in manufacturing equipment and systems for the food industry, particularly focusing on products for the processing lines of meat and sausages. Their offerings include multiple molding systems, automatic cooking and cooling systems, and demolding systems designed to enhance productivity and ensure employee safety. The company follows a thorough consulting and engineering process to develop tailored solutions that meet strict sanitary standards while utilizing the latest technology in production. Additionally, they provide installation, training, and after-sales services to ensure optimal operation of their equipment. |
||||||
| Ransomware | Grupo Halcon id22216 View details | Mexico | Other | pending | ||
|
www.halconceramicas.com , https://www.zoominfo.com/c/grupo-halcon/378396328 Grupo Halcon | Cerámicas - Con más de 50 años de experiencia, Grupo Halcón Cerámicas es hoy una compañÃa de referencia en el mercado de la cerámica nacional e internacional |
||||||
| Ransomware | JIEI (Thailand) Co., Ltd id22215 View details | Thailand | Communication / Marketing | pending | ||
|
https://jieithai.com JIEI (Thailand) Co., Ltd. was founded in November 2011 as a member company of the Kasei Kogyo Co., Ltd. group. Active in business since 1966, the Kasei Kogyo group, with a core focus on rubber extrusion for automobile use, has arrived at the present together with the development of the world's automotive industry. Through a variety of processes, from planning and development in industrial methods to production, we place a priority on responding to global demands and are involved in precision and quality product manufacturing using advanced technology that can respond to the needs of many types of customers, all from our bases in not only Japan but also North America, China, and Asia. |
||||||
| Ransomware | Wharton Independent id22214 View details | United States | Education | pending | ||
|
www.whartonisd.net , www.zoominfo.com/c/wharton-independent-school-district/213188688 Wharton Independent School District provides educational services to a diverse student population, aiming to prepare every student for success in a global society. The district offers a wide range of programs including athletics, special education, and vocational training. Targeting students from elementary through high school. Wharton ISD also emphasizes parental and community engagement in the educational process. Additionally, it provides resources and support for both students and staff across its various departments |
||||||
| Ransomware | Kuwait Portland Cement id22213 View details | Kuwait | Construction / Real Estate | pending | ||
|
www.portlandkw.co , https://www.zoominfo.com/c/kuwait-portland-cement-co/372134369 Stock Symbol = PCEM Kuwait Portland Cement Company specializes in the trading, importing, and exporting of various types of bulk cement and its packaging. The company is involved in establishing and managing warehouses and silos to supply and distribute different kinds of cement, as well as providing necessary transportation services. Additionally, it trades in construction materials and invests financial surpluses in managed portfolios. Its intended clients include businesses and organizations in the construction sector. |
||||||
| Ransomware | Amv International Development id22212 View details | United States | Construction / Real Estate | pending | ||
|
www.amvsa.com , https://www.zoominfo.com/c/amv-international-development-sa/452552625 , Amv International Development SA is a company that operates in the Civil Engineering Construction industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Bucaramanga, Santander, Colombia |
||||||
| Ransomware | Liceo Francés Antoine y Consuelo de Saint-Exupéry id22211 View details | Chile | Communication / Marketing | pending | ||
|
www.lfelsalvador.org , https://www.zoominfo.com/c/liceo-frances-antoine-y-consuelo-de-saint-exupery/430335895 El Liceo Francés de San Salvador Antoine et Consuelo de Saint-Exupéry es un establecimiento escolar francés en El Salvador que forma parte de la red de la Agencia para la Enseñanza Francesa al Extranjero. Desde kínder hasta último año de bachillerato, el Liceo sigue los programas escolares impuestos por el Ministerio de la Educación Nacional francés. Además de los diplomas salvadoreños, los alumnos pasan también los diplomas francéses de noveno grado (brevet de collège) y de bachillerato (baccalauréat). |
||||||
| Ransomware | Dolidol id22210 View details | Morocco | Retail / E-commerce | pending | ||
|
www.dolidol.ma , https://www.zoominfo.com/c/dolidol/426056693 Established in 1972, Dolidol is one of the oldest mattress manufacturers in Morocco and a leading player in thghout Morocco, perceived as being higher-end with better quality products. Dolidol manufactures and sells polyurethane foam, mattresses and sofas, as well as non-woven textile. Dolidol has developed a wide distribution network in Morocco with 46 owned stores, 10 distribution facilities and over 1,100 distributors. |
||||||
| Ransomware | AB Mauri Private id22209 View details | India | Communication / Marketing | pending | ||
|
www.abmauri.in https://www.zoominfo.com/c/a-b-mauri-india-private-ltd/1131488896 A B Mauri India Private Ltd is a company that operates in the Food & Beverage industry. It employs 100to249 people and has 25Mto50M of revenue. The company is headquartered in Ernakulam North, Kerala, India. Daughter company of 2.5 bln company www.abmauri.com www.zoominfo.com/c/ab-mauri-uk-ltd/235657 AB MAURI, a division of Associated British Foods (ABF), is a producer and distributor of yeast and bakery ingredients. It is headquartered in Peterborough in the United Kingdom with additional offices throughout the world. |
||||||
| Ransomware | InjectSense id22208 View details | United States | Healthcare / Pharma | pending | ||
|
https://www.zoominfo.com/c/injectsense-inc/406591024 https://www.injectsense.com/ Injectsense specializes in ultra-miniature implantable sensors designed for digital health applications. Their self-anchoring platforms continuously measure health parameters such as absolute pressure and oxygenation, providing doctors with vital 24/7 health insights. The company combines expertise in semiconductor and medical systems, ensuring their devices are supply chain-ready and utilize advanced miniaturization technology. Their target clients include physicians seeking to improve patient care through autonomous sensing and actionable data. |
||||||
| Ransomware | Algorithmica Research id22207 View details | Sweden | Finance / Legal / Insurance | pending | ||
|
www.algorithmica.se https://www.zoominfo.com/c/algorithmica-research/1179714 Algorithmica Research is founded in 1994 with the mission of creating innovative software for quantitative financial analysis and haven’t looked back since. Well established in northern Europe, Algorithmica has an extensive client list including top tier financial institutions. They are partner owned and has been profitable since inception, enjoying a “Triple A” credit rating from Dun & Bradstreet. Algorithmica successfully combines leading edge competence in quantitative finance and software development. They are committed to academic work on all levels, and actively sponsor research, student activities and courses in quantitative finance. |
||||||
| Ransomware | Sigma id22206 View details | France | IT | pending | ||
|
Sigma Informatique, also known as Groupe Sigma, is a mission-driven IT and digital services company headquartered in La Chapelle-sur-Erdre, France, with over 50 years of experience in the sector. The firm specializes in software publishing, integration of tailor-made digital solutions, and outsourced technology services, supporting clients through their digital transition with 700 employees across five agencies. As a 100% French enterprise, Sigma provides comprehensive IT support and innovation services to businesses seeking impactful digital transformation. The company was listed as a ransomware victim associated with the threat actor thegentlemen. |
||||||
| Ransomware | Takedown request #1798 id24734 View details | France | Other | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | PC Chandra Jewellers id22205 View details | India | Communication / Marketing | pending | ||
|
www.pcchandraindia.com https://www.zoominfo.com/c/pc-chandra-jewellers/357942698 Started in 1939 with its first showroom in Bowbazaar, North Kolkata by the Late Shri Purna Chandra Chandra, now, it has its presence all over India and also abroad. A wedding in West Bengal is incomplete without the artistic designs and fine craftsmanship of P C Chandra Jewellers. Over these decades, it has 44 showrooms, 12 showrooms in Kolkata city(under KMC), has spread its wings across 25 towns in West Bengal and 7 cities in India - Agartala, Bhubaneswar, Delhi, Noida, Bangalore, Jamshedpur and Mumbai. Crossing over geographical boundaries, the PC Chandra Jewellers also has an e-commerce site for buying online. Though steeped in tradition, P C Chandra Jewellers has brought in modernity in its approach to cater to the today's women. Its cutting edge communication and domination of the media scene has made P C Chandra Jewellers the biggest jewellery house in Eastern India. |
||||||
| Ransomware | Shifa Oman id22204 View details | Oman | Healthcare / Pharma | pending | ||
|
https://www.shifahospital.om Shifa Hospital is a multispecialty private facility in the heart of Muscat and a fully-fledged medical service provider. Our state-of-the-art infrastructure is built to the highest standards possible with dedication and careful health planning that meets international standards. Our purpose-built facility is designed and operated by Omani pioneers and is dedicated to serving our country’s population and supporting their healthcare needs. |
||||||
| Ransomware | Oriental de Seguros id22203 View details | Panama | Communication / Marketing | pending | ||
|
www.laoriental.com https://www.zoominfo.com/c/oriental-de-seguros/460263239 Oriental de Seguros offers a wide range of insurance products including health, life, personal accident, automobile, and property insurance, catering to both individuals and businesses. Their services also encompass bonds and various support options for policyholders. The company is committed to facilitating processes for their intermediaries and clients through mobile applications and enhanced payment methods. With a strong backing from international standards, Oriental de Seguros aims to provide trustworthy and comprehensive insurance solutions. |
||||||
| Ransomware | Venezuela Re id22202 View details | Venezuela, Bolivarian Republic of | Finance / Legal / Insurance | pending | ||
|
www.venezuelare.com www.bancoactivo.com C.A. Reaseguradora Internacional de Venezuela (Venezuela Re) is a reinsurance company with over 50 years of experience in the insurance sector. The company focuses on providing professional services and support through its highly skilled technical, commercial, financial, technological, and legal teams. Venezuela Re aims to contribute to the economic and social progress of the country while being committed to risk management and regulatory compliance. Its mission is to achieve stability, solidity, and transparency in the insurance sector, aspiring to be the leading reinsurer in Venezuela with international participation . Una institución bancaria que se mueve a la misma velocidad del trabajo diario de sus clientes, dándoles soluciones financieras ágiles y competitivas, con menos trámites y una atención personalizada. Banco Activo |
||||||
| Ransomware | J.V.D.B. & Associates Inc id22201 View details | United States | Finance / Legal / Insurance | pending | ||
|
[J. V. D. B. & Associates, Inc. is an Illinois collection agency. Illinois collection agencies can help businesses, medical practices and facilities that are creditors to collect their accounts receivable. Debt collection help might include; collection demand letters, debt collector phone calls, credit reporting to credit bureaus and legal proceedings including lawsuits. |
||||||
| Ransomware | Laboratorio Clinico Santa Rita id22200 View details | Costa Rica | Healthcare / Pharma | pending | ||
|
Santa Rita Laboratorios offers a wide range of medical laboratory services, including hematology, immunology, microbiology, and molecular biology. The company is committed to preserving health through accurate diagnostics and operates with state-of-the-art technology and high-resolution equipment. They provide personalized medical assistance 24/7, as well as home sample collection services for client convenience. Intended clients include individuals seeking reliable laboratory tests and diagnostics. |
||||||
| Ransomware | Narumi (Thailand) Co.,Ltd. id22199 View details | Thailand | Manufacturing / Engineering | pending | ||
|
NARUMI (THAILAND) CO., LTD. is a subsidiary of Narumi Goukin Manufacturing Co., Ltd. of Japan, established in June 2010 and located in the WHA Eastern Seaboard Industrial Estate, Rayong, Thailand. The company specializes in the manufacturing of plastic automotive components such as door handles, tailgate handles, and roof rails, primarily supplying major automotive manufacturers including Mitsubishi Motors (Thailand), Honda Automobile (Thailand), and Hitachi Chemical Automotive Products (Thailand). With approximately 130 employees, NARUMI (THAILAND) holds ISO/TS 16949 and ISO 14001 certifications, ensuring high standards in both quality management and environmental responsibility. In 2022, the company reported revenues of 622 million THB and a net profit of 41.6 million THB. |
||||||
| Ransomware | Ophtazon id22198 View details | France | Healthcare / Pharma | pending | ||
|
https://www.zoominfo.com/c/ophtazon/457685589 https://www.ophtazon.com OPHTAZON, the first medical equipment platform dedicated to ophthalmology, links doctors or clinics wishing to sell their equipment with potential buyers whatever the equipment put up for sale or the geographical situation of the sellers and Buyers. Many people on Earth suffer from eye problems, not because of ignorance but just because of the lack of materials available to doctors to diagnose or treat them. Our goal is to help doctors get the equipment they need to provide the best possible eye care regardless of their location. By creating OPHTAZON, our idea is to enhance the equipment of doctors who are no longer used to benefit the doctors who really need them. |
||||||
| Ransomware | Surtel Technologies Pvt id22197 View details | India | Services | pending | ||
|
https://www.zoominfo.com/c/surtel-technologies-pvt-ltd/357590007 www.surteltechnologies.com Surtel is a global management, information technology consulting service, and outsourcing organization. Our approach is to use our deep expertise in enterprise, extend enterprise solutions and outsourcing to help our clients create value for their customers and stakeholders. We use our industry and business-process knowledge, coupled with our awareness and understanding of emerging technologies, and new business and technology trends to design and implement solutions for our clients. We strive to help our clients improve their operational performance, deliver their products and services more effectively and efficiently, and grow their businesses in existing and new markets. We consider each of our clients unique, strive to design solutions exclusive to their business needs, and intend to help our clients move forward in every part of their businesses, from strategic planning to day-to-day operations. |
||||||
| Ransomware | Saelen/Heizomat id22196 View details | France | Communication / Marketing | pending | ||
|
www.saelen.fr www.saelen-energie.fr https://www.zoominfo.com/c/saelen/457994561 https://www.zoominfo.com/c/heizomat-france---saelen-energie/476105707 Découvrez les broyeurs de branches et de végétaux Saelen. Demandez une démonstration et découvrez les broyeurs Eliet, les tondeuses Walker et Wessex, les rogneuses de souches Rayco, le matériel Redexim et les épandeurs à sel et sable Snowex. Saelen, votre fournisseur expert en machines d'entretien des espaces verts. HEIZOMAT FRANCE, fournisseur de solutions d'énergies renouvelables, propose des équipements répondant à tous les besoins de la filière Biomasse Energie de A à Z : - broyeurs des plaquettes de bois de 30 à 80 cm de diamètre HEIZOHACK - chaudières à bois déchiqueté entièrement automatisés HEIZOMAT. - filtre céramique ZERO particules fines Entreprise en forte croissance, engagée pour la transition énergétique, dans le domaine de la biomasse énergie, propose et intègre des équipements répondant à tous les besoins de la filière biomasse énergie de A à Z. |
||||||
| Ransomware | LOCATION PEINTURES PRESTATIONS (LPP) id22195 View details | France | Communication / Marketing | pending | ||
|
Créée en 1991, la société LOCATION PEINTURES PRESTATIONS (LPP) est une société française dont le siège social est situé en Ile-de-France, au cœur de l'Essonne. Initialement spécialisée dans la peinture anti-corrosion et autres prestations, LPP s'est professionnalisée dans la conception, la fabrication et la distribution de matériels de sécurité puis de coffrages pour le bâtiment (locations, ventes, prestations de remise en état). LPP dispose d'un parc matériel de 52.000 m², de moyens de manutention et de soudure, d'un atelier pour le traitement de surface, ainsi que des ateliers pour l'entretien de matériels pour le BTP (grenaillage / peinture). Forte de 30 années d'expérience et de collaboration avec les plus grands groupes du BTP, LPP à su s'adapter aux nouvelles contraintes de production et de sécurité pour concevoir des produits plus performants, plus ergonomiques et plus respectueux de l'environnement. |
||||||