Attribution
RaaS (Russian-speaking, unattributed to a state)
Origin
Unknown (Russian-speaking operators assessed)
Last active
2024 (exit scam)
Motivation
Financially motivated (ransomware)
Attribution confidence
medium
MENA targeting
Egypt, Saudi Arabia
Sectors
Energy/petroleum, engineering, government
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Why it mattersRansomware actor, medium confidence, documented targeting Egypt, Saudi Arabia (Energy/petroleum, engineering, government sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.