Ransomware Group intelligence
ZaWoo
ActiveTrack ZaWoo with 39 published victims and 1 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
ZaWoo is tracked by Dark Eye as a ransomware group with 39 published victims.
Germany is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
19
- Leaked 16 84.2%
- Pending 3 15.8%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 3h ago | fyenuhkq3pfhnbpidj5jm2fl2lryxip4byhg6eozynrnlomu4szf2nyd.onion |
Top Activity Sectors (8)
Typical Attacks (12)
▼MITRE ATT&CK does not currently catalogue ZaWoo, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: ZaWoo executes malicious payloads via PowerShell to automate reconnaissance and persistence on compromised hosts.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: ZaWoo disables security tools by terminating antivirus processes and modifying system defenses to hinder recovery.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: ZaWoo encrypts and encodes victim files with custom symmetric keys to ensure data remains inaccessible.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: ZaWoo deletes Volume Shadow Copies and backup directories via vssadmin to prevent data restoration.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1564.003 Hidden Window Stealth
What they do: ZaWoo hides malicious processes and command execution behind hidden windows to evade detection.
What that means: Adversaries may use hidden windows to conceal malicious activity from the plain sight of users.
-
T1083 File and Directory Discovery Discovery
What they do: ZaWoo performs file and directory discovery to identify sensitive assets and prepare encryption targets.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1135 Network Share Discovery Discovery
What they do: ZaWoo uses network share discovery to locate victim file shares and target critical data across the network.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1614.001 System Language Discovery Discovery
What they do: ZaWoo discovers system language settings to tailor ransom notes and localization of malicious communications.
What that means: Adversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.
-
T1560.001 Archive via Utility Collection
What they do: ZaWoo archives stolen data using utility commands for potential exfiltration and extortion demands.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1486 Data Encrypted for Impact Impact
What they do: ZaWoo encrypts victim files using custom ransomware routines to maximize operational disruption and extortion leverage.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: ZaWoo stops critical Windows services such as backup and monitoring services to disrupt incident response.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: ZaWoo inhibits system recovery by corrupting restore points and disabling backup services before encryption.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Ransom Notes (1)
▼The note this group leaves on a compromised machine. Click a filename to read it.
How To Restore Your Files.txt
Please contact with your ID : [SNIP]
~~~ You have been attacked by ZAWOOO - a ransomware that prioritizes reputation. ~~~~
>>>>> The file will have three different suffixes, don't worry, this is a normal phenomenon and can be decrypted.
>>>>> Your data will be published on the Dark Web, download Onion Browser to visit.
https://fyenuhkq3pfhnbpidj5jm2fl2lryxip4byhg6eozynrnlomu4szf2nyd.onion
>>>>> You must pay us.
I know you may have other file backups, but there is no backup of the customer's privacy and trust.
We will disclose your data and send the download link to your customers and the GDPR (Data Protection Authorities).
Instead of paying huge data breach fines and losing customers, it's better to choose to cooperate with us
>>>>> What is the guarantee that we won't scam you?
We are not a politically motivated group and want nothing but financial rewards for our work.
If we defraud even one client, other clients will not pay us.
>>>>>If you pay the ransom, we will fulfill all the terms we agreed during the negotiation process.
Otherwise, we may consider sending your files, chat history, mailbox content, etc. to all your customers by email.
>>>>> You can think of this paid decryption as a security test.
We will tell you the entire intrusion process, give you security advice, and help you protect your system.
This amount may be cheaper than finding a security company for testing.
>>>>> Warning! Do not delete or modify encrypted files, it will lead to irreversible problems with decryption of files!
>>>>> Don't go to the police or the FBI for help and don't tell anyone that we attacked you.
They will forbid you from paying the ransom and will not help you in any way, you will be left with encrypted files and your business will die.
>>>>> When buying bitcoin, do not tell anyone the true purpose of the purchase.
Some brokers, do not allow you to buy bitcoin to pay ransom. Communicate any other reason for the purchase,
such as: personal investment in cryptocurrency, bitcoin as a gift, paying to buy assets for your business using bitcoin,
cryptocurrency payment for consulting services, cryptocurrency payment for any other services, cryptocurrency donations,
buying bitcoin to participate in ICO and buy other cryptocurrencies, buying cryptocurrencies to leave an inheritance for your children,
or any other purpose for buying cryptocurrency. Also you can use adequate cryptocurrency brokers who do not ask questions for what you buy cryptocurrency.
>>>>> After buying cryptocurrency from a broker, store the cryptocurrency on a cold wallet,
such as https://electrum.org/ or any other cold cryptocurrency wallet,
more details on https://bitcoin.org By paying the ransom from your personal cold cryptocurrency wallet,
you will avoid any problems from regulators, police and brokers.
>>>>> Don't be afraid of any legal consequences, you were very scared, that's why you followed all our instructions,
it's not your fault if you are very scared. Not a single company that paid us has had issues.
Any excuses are just for insurance company to not pay on their obligation.
>>>>> You can contact us in the following ways:
1. Download and install the session: https://getsession.org/,
our session ID: 05b0794c896a54271d3d39c3b395d86aee2d5c05f196c59f3781bac1b1ac1a1a12
2. Send email: [email protected]
In order to ensure that you can receive the message, please send the message in two ways at the same time
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (39)
Search, filter and paginate the victim timeline for ZaWoo. Showing 1–39 of 39.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | zenithtechnology.co.nz id32325 View details | New Zealand | IT | pending | ||
|
zenithtechnology.co.nz operates within the IT sector and is located in New Zealand. The entity serves as a subject within a threat-intelligence index catalog, specifically documented as a ransomware victim linked to the threat actor ZaWoo. This listing reflects cybersecurity intelligence analysis concerning the entity's association with this threat actor in the ransomware context. The description remains factual and neutral, focusing on the verified association without extrapolating beyond confirmed intelligence. The entry supports threat-monitoring efforts for sector-specific risk assessment in the IT environment across New Zealand. |
||||||
| Ransomware | zenithtechnology.co.nz id32325 View details | New Zealand | IT | pending | ||
|
Zenith Technology Corporation Limited (ZenTech) is a New Zealand-based Contract Research Organisation (CRO) headquartered in Dunedin, New Zealand. The company was incorporated in 1987 and specializes in clinical research and pharmaceutical analytical services for the international pharmaceutical industry. |
||||||
| Ransomware | fes-sport.de id32326 View details | Germany | Other | leaked | ||
|
fes-sport.de is a German entity operating within the Other sector, providing web-based sport-related services and digital platform offerings under its domain. The entity is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with threat actor ZaWoo. This entry documents the relationship between the organization and the identified cyber threat actor without disclosing unverified incident details such as data stolen, records accessed, ransom demands, or confirmed breach specifics. The classification supports threat-intelligence researchers, security teams, and compliance stakeholders monitoring ransomware exposure across sectors and geographies. fes-sport.de remains listed as a ransomware victim linked to ZaWoo for index maintenance and situational awareness. |
||||||
| Ransomware | fes-sport.de id32326 View details | Germany | Other | leaked | ||
|
FES Sport (fes-sport.de) is the Institut für Forschung und Entwicklung von Sportgeräten (FES), a German institute specializing in research, engineering, and development of high-performance sports equipment and technology. It is based in Berlin, Germany, with an additional facility in Oberhof. |
||||||
| Ransomware | esopartnerscpa.com id32327 View details | United States | Finance / Legal / Insurance | leaked | ||
|
esopartnerscpa.com operates within the Finance, Legal, and Insurance sectors and serves clients requiring specialized professional services. The entity is located in the United States and provides offerings aligned with regulated industries where cybersecurity resilience is critical. According to the threat-intelligence index, esopartnerscpa.com is cataloged as a ransomware victim associated with the threat actor ZaWoo. This listing reflects the entity's inclusion in incident-based intelligence records tied to ZaWoo's activity. The description avoids speculation regarding breach details, data scope, or financial impact, focusing solely on the verified association and sector context. |
||||||
| Ransomware | esopartnerscpa.com id32327 View details | United States | Finance / Legal / Insurance | leaked | ||
|
ESOP Partners appears to be a specialized professional-services firm focused on Employee Stock Ownership Plans (ESOPs) rather than a general-purpose CPA firm. |
||||||
| Ransomware | zenithtechnology id32289 View details | New Zealand | IT | pending | ||
|
ZenithTechnology operates within the IT sector and is situated in New Zealand. The entity is documented within this threat-intelligence index as a ransomware victim associated with the threat actor ZaWoo. This listing type indicates a cybersecurity incident where the organization was impacted by ransomware activity linked to ZaWoo. The description adheres to neutral, authoritative reporting standards without inventing specific technical details, breach confirmations, or unverified claims regarding data handling or operational impact. The catalog entry serves to inform stakeholders of the association between ZenithTechnology and ZaWoo within the ransomware victim classification. |
||||||
| Ransomware | zenithtechnology id32289 View details | New Zealand | IT | pending | ||
|
[Unpublished] |
||||||
| Ransomware | fessport id32290 View details | Germany | Services | leaked | ||
|
fes-sport.de is a domain operating within the Services sector based in Germany (DE), providing professional and commercial service offerings under its domain identity. The entity has been cataloged in this threat-intelligence index under the listing type ransomware victim, with the associated threat actor ZaWoo identified as the source of the attributed incident. This record serves as a factual reference point for monitoring cybersecurity events, threat actor activity, and potential impacts across the services sector in Germany. No specific incident details such as data stolen, ransom demands, or breach confirmation are included, maintaining strict neutrality per cataloging protocols. It was listed as a ransomware victim associated with ZaWoo. |
||||||
| Ransomware | fessport id32290 View details | Germany | Services | leaked | ||
|
[Unpublished] |
||||||
| Ransomware | esopartnerscpa id32291 View details | United States | Finance / Legal / Insurance | leaked | ||
|
esopartnerscpa operates within the United States across Finance, Legal, and Insurance sectors, providing specialized partnership and service offerings relevant to regulated industries. As a ransomware victim entry in the threat-intelligence index, it is associated with the ZaWoo threat actor, indicating exposure within a cybersecurity incident context. The listing type identifies esopartnerscpa specifically as a ransomware victim, contextualizing its role within broader cyber threat analysis and sector-focused intelligence monitoring. This description avoids speculation regarding data scope, breach confirmation, or operational impact, maintaining factual neutrality consistent with threat-intelligence catalog standards. |
||||||
| Ransomware | esopartnerscpa id32291 View details | United States | Finance / Legal / Insurance | leaked | ||
|
[Unpublished] |
||||||
| Ransomware | esopartnerscpa id32291 View details | China | Finance / Legal / Insurance | leaked | ||
|
[Unpublished] |
||||||
| Ransomware | vectorsoft.de id32292 View details | Germany | IT | leaked | ||
|
vectorsoft.de is an IT sector entity based in Germany, operating within the digital services domain and cataloged under threat-intelligence records as a ransomware victim. The entity's classification reflects its involvement in an incident linked to the ZaWoo threat actor, a group documented in cyber threat intelligence databases. This listing type indicates the entity was identified within the scope of ransomware activity targeting organizations in the IT sector. The description adheres to neutral, encyclopedic standards without speculating on unverified technical or operational details of the incident. vectorsoft.de remains a reference point in threat-intelligence indexing for entities affected by ZaWoo-associated ransomware operations. |
||||||
| Ransomware | vectorsoft.de id32292 View details | Germany | IT | leaked | ||
|
vectorsoft is Vectorsoft AG, a German software-development company headquartered in Heusenstamm, Hesse, near Frankfurt am Main, Germany. |
||||||
| Ransomware | winterdienst-berlin.com id32293 View details | Germany | Services | leaked | ||
|
winterdienst-berlin.com operates within the Services sector located in Germany. The domain name suggests specialized service functions, though specific operational details remain limited within public threat intelligence records. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim linked to the ZaWoo threat actor group. The association indicates exposure to ransomware activity within the German services environment. This listing serves to contextualize the entity within broader cyber threat patterns and actor attribution frameworks. |
||||||
| Ransomware | winterdienst-berlin.com id32293 View details | Germany | Services | leaked | ||
|
The company is located at Boschweg 18–20, 12057 Berlin, and lists [email protected] and +49 30 684 083-6 as contact details. According to their company website, their services include:Snow and slush removal Clearing and gritting of sidewalks, roads, parking areas and public spaces Manual and machine-assisted winter maintenance Winter-service operations for businesses, private households and municipalities GPS-supported fleet and quality controls Environmentally conscious winter-service methods.Availability around the clock during winter conditions .The company says it combines around 30 years of experience with modern technology and environmentally friendly materials. |
||||||
| Ransomware | hd-werkstaetten.de id32294 View details | Germany | Manufacturing / Engineering | leaked | ||
|
hd-werkstaetten.de operates within the German manufacturing and engineering sector, focusing on industrial production and technical solutions. The entity was formally cataloged as a ransomware victim linked to threat actor ZaWoo. Threat intelligence indexing captures such associations to enhance situational awareness for cybersecurity professionals monitoring industrial threats. This listing reflects the cybersecurity community's documentation of the incident without disclosing confirmed technical details or operational impact. Understanding these victim profiles aids in refining defense strategies for similar manufacturing organizations in Europe. |
||||||
| Ransomware | hd-werkstaetten.de id32294 View details | Germany | Manufacturing / Engineering | leaked | ||
|
hd-werkstaetten.de belongs to Heidelberger Werkstätten der Lebenshilfe Heidelberg e. V., a German social enterprise / sheltered workshop organization supporting people with disabilities through employment, vocational training, and workplace inclusion. Its main site is in Heidelberg, Baden-Württemberg, Germany. |
||||||
| Ransomware | ng-engineering.de id32295 View details | Germany | Manufacturing / Engineering | leaked | ||
|
ng-engineering.de is a German entity operating within the manufacturing and engineering sector, providing engineering-focused services and solutions aligned with industrial production and technical development needs. The domain and organization are cataloged in this threat-intelligence index under the listing type ransomware victim. The association with threat actor ZaWoo indicates that this entity was impacted by ransomware activity linked to ZaWoo's operations. No specific incident details, such as data stolen, ransom demands, or confirmed breach metrics, are included to maintain factual neutrality and avoid speculation. This listing serves to inform security professionals and stakeholders of the entity's status within the ransomware threat landscape for the German manufacturing and engineering sector. |
||||||
| Ransomware | ng-engineering.de id32295 View details | Germany | Manufacturing / Engineering | leaked | ||
|
NG Engineering Gruppe is a German engineering and technical-services group headquartered in Rödental, Bavaria. The group has been operating for more than 20 years and has locations in Germany, Poland and the Czech Republic. It provides engineering services throughout the product-development process and also offers personnel/recruitment services. |
||||||
| Ransomware | berghotel-oberhof.de id32296 View details | Germany | Hospitality / Food & Beverage / Tourism | leaked | ||
|
berghotel-oberhof.de operates within the German hospitality, food and beverage, and tourism sectors, providing lodging and related services to guests. The domain represents an organization whose infrastructure was identified within a threat-intelligence index as a ransomware victim. This listing associates the entity with ZaWoo, a threat actor noted in cyber threat reporting. No specific incident details such as data stolen, ransom demands, or breach confirmation are included per strict factual constraints. The catalog entry documents the association neutrally for threat-intelligence and security awareness purposes. |
||||||
| Ransomware | berghotel-oberhof.de id32296 View details | Germany | Hospitality / Food & Beverage / Tourism | leaked | ||
|
Konsumhotel Berghotel Oberhof is a wellness and leisure hotel in Oberhof, Thuringia, Germany, located in the Thuringian Forest. It is operated by Berghotel Oberhof GmbH, with Markus Barth as managing director. |
||||||
| Ransomware | rsk-immobilien.de id32297 View details | Germany | Construction / Real Estate | leaked | ||
|
rsk-immobilien.de operates within the German construction and real estate sector, offering services aligned with property management and related commercial activities. The entity is cataloged in this threat-intelligence index as a ransomware victim associated with ZaWoo, a threat actor identified in cybersecurity threat reporting. This listing type indicates documented exposure to ransomware activity within the organization's operational environment. Details regarding specific attack vectors, data impacts, or remediation steps remain intentionally limited to preserve factual accuracy and avoid speculation beyond verified intelligence sources. The entry serves to inform security professionals and stakeholders about real-world incidents affecting entities in this sector and geographic region. |
||||||
| Ransomware | rsk-immobilien.de id32297 View details | Germany | Construction / Real Estate | leaked | ||
|
RSK Immobilien GmbH is a German real-estate project developer and property company headquartered in Weißenfels, Saxony-Anhalt. Its core activities are the development, realization, renovation and marketing of residential and commercial properties, with a strong current focus on residential projects. |
||||||
| Ransomware | montronix.de id32298 View details | Germany | Manufacturing / Engineering | leaked | ||
|
montronix.de is a German entity operating within the manufacturing and engineering sector, providing specialized technical and industrial solutions for production, design, and operational workflows. The domain is cataloged as a ransomware victim associated with threat actor ZaWoo. This designation reflects its inclusion in threat-intelligence records documenting cyber incidents affecting organizations in this region and industry. No specific breach details, stolen data categories, record counts, ransom demands, or confirmed incident specifics are included here to maintain factual neutrality. The entry serves to index the entity alongside its threat context for security analysts and defenders monitoring ZaWoo activity across manufacturing environments. |
||||||
| Ransomware | montronix.de id32298 View details | Germany | Manufacturing / Engineering | leaked | ||
|
MONTRONIX GmbH is a German industrial technology company specializing in machine-tool monitoring, process monitoring, machine protection, and condition monitoring. The company was founded in 1990 as a spin-off of Kennametal, Inc. and focuses primarily on monitoring solutions for metal-cutting and machining operations. |
||||||
| Ransomware | kdynium.cz id32299 View details | Czechia | IT | leaked | ||
|
kydynium.cz operates within the IT sector and is situated in the Czech Republic. The entity functions as a technology provider or service organization whose infrastructure was impacted by a ransomware incident. This listing type categorizes kdynium.cz as a ransomware victim within the threat-intelligence index. The association with ZaWoo identifies the specific threat actor linked to this event in the intelligence record. The description remains factual and neutral, focusing on the entity's classification and context without elaborating on unconfirmed technical details or incident specifics. |
||||||
| Ransomware | kdynium.cz id32299 View details | Czechia | IT | leaked | ||
|
KDYNIUM a. s. is a Czech precision foundry based in Kdyně, Plzeň Region, specializing in precision castings made using the lost-wax (investment casting) process. The company says its foundry has been operating since 1954, while the current joint-stock company was incorporated in 1992. |
||||||
| Ransomware | frm.ind.br id32300 View details | Brazil | Services | leaked | ||
|
frm.ind.br is an entity operating within the Services sector located in Brazil, with offerings aligned to professional and commercial service delivery. The entity is cataloged within the threat-intelligence index as a ransomware victim, specifically associated with the ZaWoo threat actor. This listing reflects the entity's documented exposure within cybersecurity threat datasets, providing context for threat researchers and defenders monitoring ransomware campaigns targeting the Services sector in the Brazilian market. The entry serves as a reference point for understanding attack patterns and entity vulnerability without disclosing unverified incident details. frm.ind.br was listed as a ransomware victim associated with ZaWoo. |
||||||
| Ransomware | frm.ind.br id32300 View details | Brazil | Services | leaked | ||
|
FRM - Fábrica de Rolamentos e Mancais Ltda is a Brazilian industrial manufacturer specializing in bearings, bearing housings, and industrial movement solutions. The company is based in Curitiba, Paraná, Brazil and has been operating since 1980. |
||||||
| Ransomware | acqbuilt.com id32301 View details | Canada | IT | leaked | ||
|
acqbuilt.com operates within the IT sector and is identified as a ransomware victim within the threat-intelligence index. The entity is geographically associated with Canada and represents a target profile relevant to cyber threat analysis. Its inclusion reflects documented intelligence linking this organization to the ZaWoo threat actor group, providing context for security professionals monitoring ransomware activity in the technology sector. This listing serves as a factual reference point for catalog users assessing affected entities and associated threat actors without disclosing unverified incident details. |
||||||
| Ransomware | acqbuilt.com id32301 View details | Canada | IT | leaked | ||
|
company based in Edmonton, Alberta, Canada. It specializes in using factory-based construction methods to build residential homes faster, with more precision, and with reduced waste compared with traditional on-site building. |
||||||
| Ransomware | BOTEC-CZ id32302 View details | Germany | Manufacturing / Engineering | leaked | ||
|
BOTEC-CZ is a company operating within the manufacturing and engineering sector, based in Germany. The entity provides specialized industrial services and technical solutions relevant to production and engineering workflows across its operational region. It is cataloged in this threat-intelligence index as a ransomware victim, with the associated threat actor and source identified as ZaWoo. This listing reflects the entity's status within the ransomware incident database without disclosing unverified operational details or confirming specific breach specifics. The entry serves threat analysts assessing cyber risks across industrial sectors and geographic regions. |
||||||
| Ransomware | BOTEC-CZ id32302 View details | Germany | Manufacturing / Engineering | leaked | ||
|
boTec helps companies in process and production industries improve efficiency, manage data, and optimize business operations using software solutions, consulting, and integration services. |
||||||
| Ransomware | n-tree.com id32303 View details | Austria | IT | leaked | ||
|
n-tree.com operates within the IT sector and is associated with the threat actor ZaWoo in this ransomware victim listing. The entity represents an organization impacted by cyber activity attributed to ZaWoo, with operational context tied to Austria. This catalog entry provides neutral documentation of the relationship between n-tree.com and ZaWoo within the threat-intelligence index framework. No specific incident details, breach confirmations, data impacts, or financial claims are included per strict factual guidelines. The listing type identifies n-tree.com as a ransomware victim connected to ZaWoo for analytical and defensive reference purposes. |
||||||
| Ransomware | n-tree.com id32303 View details | Austria | IT | leaked | ||
|
They develop software and hardware solutions mainly for visitor management and ticketing systems used by: swimming pools and wellness centers, museums and exhibitions, leisure parks, climbing gyms and fitness facilities, mountain railways and ski lifts, industrial visitor systems. Their main locations include: Bregenz, Austria (head office), Delitzsch, Germany, Heimberg, Switzerland, Riazzino, Switzerland/Italian region. |
||||||
| Ransomware | hoerburger id32304 View details | Germany | Retail / E-commerce | pending | ||
|
hoerburger.de operates within the German retail and e-commerce sector, providing online commerce services and related business functions. The entity was formally listed within the threat-intelligence index under the designation ransomware victim, associated with threat actor ZaWoo. This classification reflects the cybersecurity event documented in the index, without disclosing specific technical findings or confirmed breach details. The listing underscores vulnerabilities within digital retail infrastructure and serves as a reference point for threat actors and defenders monitoring ZaWoo activity in European commerce environments. Authorities and industry stakeholders reference such entries to understand evolving risks across e-commerce sectors. |
||||||
| Ransomware | hoerburger id32304 View details | Germany | Retail / E-commerce | pending | ||
|
[Unpublished] |
||||||