ransomware

N0n

Provisional

Ransomware

Motivation

—

Attribution confidence

Provisional — not yet assessed

Provisional profile auto-created from leak-site claims — not analyst-vetted. A group's self-claim of a victim, not a confirmed breach.

Why it mattersRansomware actor, unrated confidence.

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Targets

Company #70targetLeak-site claim · ransomware.live2026-10-15
Asyaport (container terminal operations)targetLeak-site claim · ransomware.live2026-10-12
NEOM Ports (industrial port operations)targetLeak-site claim · ransomware.live2026-10-12
Eurogate Tanger (container terminal operations)targetLeak-site claim · ransomware.live2026-10-12
GCS Kuwait (port community system operations)targetLeak-site claim · ransomware.live2026-10-12
AstraZeneca TürkiyetargetLeak-site claim · ransomware.live2026-09-18
PayPal support operations (Transcom WorldWide)targetLeak-site claim · ransomfeed2026-09-18

Claimed victims · 7 tracked

Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →

Claim volume · last 12 months

NDJFMAMJJASO

Date	Victim	Country	Sector
2026-10-15	Company #70	Egypt	—
2026-10-12	NEOM Ports (industrial port operations)	Saudi Arabia	Transportation
2026-10-12	Eurogate Tanger (container terminal operations)	Morocco	Transportation
2026-10-12	GCS Kuwait (port community system operations)	Kuwait	Transportation
2026-10-12

Useful?