SOCRadar threat intelligence analysis: Nu-Quest Distribution Inc, a United States Retail & E-Commerce organization, was listed on interlock's dark web portal on October 12, 2026. Includes stealer-log context…
SOCRadar threat intelligence analysis: BKH ICD, a South Korea Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting…
SOCRadar threat intelligence analysis: Engineers Contractors Fabricators Inc (ECF), a United States Manufacturing organization, was listed on interlock's dark web portal on October 12, 2026. Includes stealer-log context…
SOCRadar threat intelligence analysis: BMT IQ, a United Kingdom Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting…
SOCRadar threat intelligence analysis: Concord Eye Center, a United States Healthcare organization, was listed on interlock's dark web portal on October 12, 2026. Includes stealer-log context and group…
SOCRadar threat intelligence analysis: EUSU Logistics, a South Korea Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting…
SOCRadar threat intelligence analysis: Saehan Marine, a South Korea Transportation organization, was listed on N0n's dark web portal on October 12, 2026. Includes stealer-log context and group targeting…
SOCRadar CTI analysis of Charles E. Tabor AAL LLC (United States) listed by rhysida ransomware group. Stealer-log review found no direct credential exposure in current sample. Published 2026-10-11.
SOCRadar CTI analysis of the qilin ransomware attack on Friendship Christian School (United States). Stealer-log intelligence reveals credential exposure across organizational systems. Published 2026-10-11.
SOCRadar CTI analysis of the qilin ransomware attack on CNESTEN (Morocco). Stealer-log intelligence reveals credential exposure across organizational systems.
SOCRadar CTI analysis of the Redact ransomware attack on DexCom (United States). Stealer-log intelligence reveals multi-category credential exposure including Keycloak IdP, Jira, and Confluence. Published 2026-10-10.
SOCRadar CTI analysis of Glenhardie Country Club (United States) listed by qilin ransomware group. Stealer-log review found no direct credential exposure in current sample.
SOCRadar CTI analysis of Gress Clark Young & Schoepper (United States) listed by rhysida ransomware group. Stealer-log review found no direct credential exposure in current sample.
Windor Supply was listed by the Settra ransomware group on October 2, 2026. SOCRadar CTI provides threat actor context and supply sector security recommendations.
St. Francis Healthcare HI was listed on Wallstreet's dark web leak site on October 2, 2026. SOCRadar CTI examines the Wallstreet group's healthcare targeting pattern and sector risk…
US electric cooperative Sangre de Cristo Electric Association is claimed as a victim by the INC Ransom ransomware group, raising concerns for regional energy infrastructure security.
The University of Illinois Chicago (UIC) was listed by Booba Project ransomware on October 2, 2026. SOCRadar CTI identifies severe stealer-log exposure spanning 2024-2026, including UIC ADFS, Google,…
Raleigh Family Medicine was listed by Booba Project ransomware on October 2, 2026. SOCRadar CTI identifies a notable Workstation Compromise stealer-log entry — one staff credential captured on…
Malaysian pewter manufacturer Royal Selangor has been claimed as a victim by the BYOD ransomware group. SOCRadar CTI reveals severe stealer log exposure with 16 records from July…
US professional services firm Thomas Y. Pickett & Co. has been claimed as a victim by the aurora ransomware group. SOCRadar CTI found limited stealer log activity —…
US telecommunications company Trump Mobile Wireless has been listed by the BYOD ransomware group. SOCRadar CTI found notable stealer log exposure with 8 customer-related records from February to…
Peruvian printing and color services company METROCOLOR S.A. has been listed as a victim by the emperador ransomware group. SOCRadar CTI analysis found no current stealer log exposure…
Panamanian logistics company PANCARIBBEAN LOGISTICS GROUP has been listed by the emperador ransomware group. SOCRadar CTI analysis found no stealer log exposure for the regional freight operator.