Ransomware needs a way in. Stolen credentials are the cheapest one.
booba Ransomware Group
Ransomware group profile
8Victims
Description
No description available for this group.
Threat Level & Status Breakdown
For booba · Based on incidents in selected period
2.4threat level
Aggressiveness6/ 10
Lethality0/ 10
Criticality1.1/ 10
Status Breakdown
Claimed100.0%51
First seenJun 2026
Last seenSep 2026
Avg ransom—
Payment rate—
Recent activity
Monthly attack count for booba in the selected period
8Total attacks
4peak in Aug
2.7avg / month
No intelligence data for this group.
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for booba
Defense Evasion
T1562
Impair Defenses
Execution
T1059
Command and Scripting Interpreter
T1105
Ingress Tool Transfer
Impact
T1486
Data Encrypted for Impact
T1490
Inhibit System Recovery
T1485
Data Destruction
Lateral Movement
T1021
Remote Services
Other
T1040
T1040
T1060
T1060
T1543
T1543
Persistence
T1078
Valid Accounts
Victims(46)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Mestechkin Law Group P.C. | — | Claimed | 7 days ago | |
| Atlas Ocean Voyages | — | Claimed | 7 days ago | |
| Mestechkin Law Group P.C. | United States | Claimed | 7 days ago | |
| Atlas Ocean Voyages | United States | Claimed | 7 days ago | |
| Oklahoma Manufacturing Alliance | United States | Claimed | about 2 months ago | |
| Incredible Technologies | United States | Claimed | 22 days ago | |
| Pelli Clarke Pelli Architects | — | Claimed | 22 days ago | |
| Zynex | Switzerland | Claimed | 22 days ago | |
| URA Group | — | Claimed | 27 days ago | |
| It's Games | — | Claimed | 27 days ago | |
| Jani-King | United States | Claimed | 27 days ago | |
| frostyacres.com | — | Claimed | 27 days ago | |
| Pelli Clarke & Partners | United States | Claimed | 27 days ago | |
| Telewave.io | — | Claimed | 27 days ago | |
| Altivera | — | Claimed | 27 days ago | |
| upstaging.com | — | Claimed | 27 days ago | |
| Davroc | United Kingdom | Claimed | 28 days ago | |
| Chernyy & Associates | — | Claimed | 28 days ago | |
| Country-Wide Insurance | United States | Claimed | 28 days ago | |
| Federis Abogados | — | Claimed | 28 days ago |
Page 1 of 3
Affected countries(2)
Countries where this group has been reported to target or leak victims.