ransomware

Doommageddon

Provisional

Ransomware

Motivation

—

Attribution confidence

Provisional — not yet assessed

Provisional profile auto-created from leak-site claims — not analyst-vetted. A group's self-claim of a victim, not a confirmed breach.

Why it mattersRansomware actor, unrated confidence.

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Targets

SITTNAK Lojistik A.Ş.targetLeak-site claim · ransomware.live2026-08-28
Akpera Gayrimenkul Yatırım A.Ş.targetLeak-site claim · ransomware.live2026-08-28
Mercedes-Benz TurktargetLeak-site claim · ransomware.live2026-05-20
KOLORKIM KIMYAtargetLeak-site claim · ransomware.live2026-05-10
iw steelTEC Makine San. ve Tic. A.Ş.targetLeak-site claim · ransomware.live2026-03-08

Claimed victims · 5 tracked

Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →

Claim volume · last 12 months

ONDJFMAMJJAS

Date	Victim	Country	Sector
2026-08-28	Akpera Gayrimenkul Yatırım A.Ş.	Türkiye	Other
2026-08-28	SITTNAK Lojistik A.Ş.	Türkiye	Transportation
2026-05-20	Mercedes-Benz Turk	Türkiye	Manufacturing
2026-05-10	KOLORKIM KIMYA	Türkiye	Manufacturing
2026-03-08

Useful?