Ransomware
EverestEverest Ransom Team
Attribution
Financially motivated; hybrid ransomware + initial-access broker (unattributed)
Origin
Unknown (Russian-speaking operators assessed)
Motivation
Financially motivated (ransomware)
Attribution confidence
medium
MENA targeting
UAE (and broader Gulf)
Sectors
Aviation, healthcare, government/tourism, retail/automotive/real estate
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Why it mattersRansomware actor, medium confidence, documented targeting UAE (and broader Gulf) (Aviation, healthcare, government/tourism sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.