ransomware

Everest

active · last signal 1mo agoAttribution: ModeratePlausible and partly corroborated — some gaps or single-source elements.RaaS: Operator

Ransomware

EverestEverest Ransom Team

Attribution

Financially motivated; hybrid ransomware + initial-access broker (unattributed)

Origin

Unknown (Russian-speaking operators assessed)

First seen

2020

Last active

2025

Motivation

Financially motivated (ransomware)

Attribution confidence

medium

RaaS role

Operator

MENA targeting

UAE (and broader Gulf)

Sectors

Aviation, healthcare, government/tourism, retail/automotive/real estate

Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.

Why it mattersRansomware actor, medium confidence, documented targeting UAE (and broader Gulf) (Aviation, healthcare, government/tourism sectors).

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Related to

TrigonaactorTechnique overlap
Money MessageactorTechnique overlap
StormousactorTechnique overlap
Hunters InternationalactorTechnique overlap
MeowactorTechnique overlap
SarcomaactorTechnique overlap
Cicada3301actorTechnique overlap
IncRansomactorTechnique overlap
BQTLock

Coverage robustness · vs this actor

How evasion-resistant our detection coverage is against Everest's techniques — Summiting the Pyramid scores analytics (1 brittle – 5 robust); the actor inherits through its TTPs. This is a detection-engineering metric, not an attribution signal — see Attribution for confidence.

Techniques with a robust rule

Techniques with any detection

5 / 5

Mean robustness (of covered)

Claimed victims · 6 tracked

Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →

Claim volume · last 12 months

ONDJFMAMJJAS

Useful?

Date	Victim	Country	Sector
2026-08-05	Al-Futtaim Group	UAE	—
2026-07-21	Al-Futtaim Group	UAE	Retail & E-Commerce
2026-07-17	Emirates Flight Catering	UAE	Hospitality
2026-07-09	NIMR Oil	UAE	Energy & Utilities
2026-05-28	Sidra Kuwait Hospital	Kuwait	Healthcare
2026-03-30	Straight Line Logistics	UAE	Transportation