Ransomware needs a way in. Stolen credentials are the cheapest one.
booba Ransomware Group
Ransomware group profile
6Victims
Description
No description available for this group.
Threat Level & Status Breakdown
For booba · Based on incidents in selected period
3.8threat level
Claimed100.0%6
First seenJun 2026
Last seenAug 2026
Avg ransom—
Payment rate—
Recent activity
Monthly attack count for booba in the selected period
6Total attacks
4peak in Aug
3avg / month
↑ 2 vs first month
No intelligence data for this group.
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for booba
Defense Evasion
T1562
Impair Defenses
Execution
T1059
Command and Scripting Interpreter
T1105
Ingress Tool Transfer
Impact
T1486
Data Encrypted for Impact
T1490
Inhibit System Recovery
T1485
Data Destruction
Lateral Movement
T1021
Remote Services
Other
T1040
T1040
T1060
T1060
T1543
T1543
Persistence
T1078
Valid Accounts
Victims(49)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Zynex | Switzerland | Claimed | about 14 hours ago | |
| Incredible Technologies | United States | Claimed | about 14 hours ago | |
| Oklahoma Manufacturing Alliance | United States | Claimed | about 1 month ago | |
| Pelli Clarke Pelli Architects | — | Claimed | about 14 hours ago | |
| Altivera | — | Claimed | 6 days ago | |
| URA Group | — | Claimed | 6 days ago | |
| upstaging.com | — | Claimed | 6 days ago | |
| okalliance.com | — | Claimed | 6 days ago | |
| janiking.com | — | Claimed | 6 days ago | |
| itsgames.com | — | Claimed | 6 days ago | |
| frostyacres.com | — | Claimed | 6 days ago | |
| Jani-King | United States | Claimed | 6 days ago | |
| Pelli Clarke & Partners | United States | Claimed | 6 days ago | |
| Telewave.io | — | Claimed | 6 days ago | |
| Davroc | United Kingdom | Claimed | 7 days ago | |
| Chernyy & Associates | — | Claimed | 7 days ago | |
| Country-Wide Insurance | United States | Claimed | 7 days ago | |
| Federis Abogados | — | Claimed | 7 days ago | |
| Chernyy and Associates, P.C. | Russia | Claimed | 7 days ago | |
| Davroc Limited | United Kingdom | Claimed | 7 days ago |
Page 1 of 3
Affected countries(2)
Countries where this group has been reported to target or leak victims.