Ransomware Intelligence

arcus media Ransomware Group

Ransomware group profile

17Victims

Description

No description available for this group.

Threat Level & Status Breakdown

For arcus media · Based on incidents in selected period

3.5threat level
Aggressiveness9.3/ 10
Lethality0/ 10
Criticality1/ 10

Status Breakdown

Claimed100.0%17
First seenJul 2025
Last seenJul 2026
Avg ransom
Payment rate

Recent activity

Monthly attack count for arcus media in the selected period

17Total attacks
7peak in Jul
4.3avg / month
↑ 2 vs first month
JulAugSepJul02468

No intelligence data for this group.

TTPs & Attack Vectors

Tools, initial access, and MITRE ATT&CK techniques for arcus media

Defense Evasion

T1562

Impair Defenses

Discovery

T1046

Network Service Discovery

Execution

T1059

Command and Scripting Interpreter

Impact

T1486

Data Encrypted for Impact

T1490

Inhibit System Recovery

Lateral Movement

T1021

Remote Services

T1080

Taint Shared Content

T1021.001

Remote Desktop Protocol

Persistence

T1078

Valid Accounts

T1547

Boot or Logon Autostart Execution

Victims(17)

CompanyDomainCountryIndustryStatusDiscovered
Perpustam
Claimed
1 day ago
gemese.pt
Claimed
1 day ago
DistriboxTransportation
Claimed
1 day ago
Be TravelHospitality
Claimed
1 day ago
COREBI(NowVertical)Technology
Claimed
1 day ago
I-FITNESSRetail & E-Commerce
Claimed
1 day ago
East African GasoilEnergy & Utilities
Claimed
10 days ago
Announcement 16-09-2025US United States
Claimed
10 months ago
Grup GestioES SpainProfessional Services
Claimed
10 months ago
TunadBR BrazilTechnology
Claimed
10 months ago
Accflex ERPEG EgyptTechnology
Claimed
10 months ago
EB FarmacuticaBR BrazilManufacturing
Claimed
11 months ago
CCI TorreviejaES SpainTechnology
Claimed
12 months ago
College stjbFR FranceEducation
Claimed
12 months ago
I.P. One LTDTH ThailandManufacturing
Claimed
12 months ago
Protech MedicalGB United KingdomRetail & E-Commerce
Claimed
12 months ago
SubsCorpCO ColombiaTechnology
Claimed
12 months ago

Affected countries(8)

Countries where this group has been reported to target or leak victims.