Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
How evasion-resistant our detection coverage is against BlackNevas's techniques — Summiting the Pyramid scores analytics (1 brittle – 5 robust); the actor inherits through its TTPs. This is a detection-engineering metric, not an attribution signal — see Attribution for confidence.
Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →
| Date | Victim | Country | Sector |
|---|---|---|---|
| 2026-09-08 | Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco... | Türkiye | — |
| 2026-08-25 | Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco... | Türkiye | Manufacturing |
| 2026-08-07 | OTEGROUP | Oman | — |
| 2026-08-01 | OTEGROUP | Oman | Other |
| 2026-07-14 | L'azurde | Saudi Arabia | Retail & E-Commerce |
| 2026-06-30 | Arkin Group | Türkiye | Professional Services |
| 2026-06-30 | Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach | Türkiye | Hospitality |
| 2026-03-17 | The company MST (Sanko Makina and ASKO Holding) | Türkiye | Manufacturing |