Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure
booba project Ransomware Group
Ransomware group profile
Description
Booba Project is a financially motivated ransomware syndicate that emerged in July 2026. Utilizing a double-extortion business model, the group targets small-to-midsize industrial entities and employs a sophisticated infrastructure for leak disclosures and cryptocurrency ransom demands.
Key insights
- •Leverages stolen credentials from infostealer logs for initial access.
- •Exploits unpatched vulnerabilities in RDP services and legacy software.
- •Neutralizes security mechanisms before executing ransomware payloads.
- •Utilizes hidden onion services for negotiations and data leaks.
- •Stages data exfiltration to cloud servers prior to encryption of hosts.
- •Demands cryptocurrency payments while threatening public exposure of sensitive data.
Threat Level & Status Breakdown
For booba project · Based on incidents in selected period
Status Breakdown
Recent activity
Monthly attack count for booba project in the selected period
No intelligence data for this group.
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for booba project
T1562
Impair Defenses
T1047
Windows Management Instrumentation
T1486
Data Encrypted for Impact
T1490
Inhibit System Recovery
T1080
Taint Shared Content
T1021
Remote Services
T1021.001
Remote Desktop Protocol
T1041
T1041
T1561
T1561
T1078
Valid Accounts
Victims(56)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Horizon Eye Specialists & LASIK Center | United States | Claimed | about 19 hours ago | |
| Hudson River Museum | United States | Claimed | about 19 hours ago | |
| BASS Medical Group | United States | Claimed | about 19 hours ago | |
| Kerckstede vzw | Belgium | Claimed | about 19 hours ago | |
| Regent Christian Online Academy | Canada | Claimed | about 20 hours ago | |
| Charter Township of Commerce | United States | Claimed | about 20 hours ago | |
| KING FAMILY MEDICAL | United States | Claimed | about 20 hours ago | |
| City of Big Spring | United States | Claimed | about 20 hours ago | |
| Aesthetic Specialty Centre | Pakistan | Claimed | about 20 hours ago | |
| City Hall - Everett, MA | United States | Claimed | 8 days ago | |
| City of Mt. Angel, Oregon | United States | Claimed | 8 days ago | |
| Pearland Pediatrics | United States | Claimed | 8 days ago | |
| Chicago Vein Institute | United States | Claimed | 8 days ago | |
| Research Foundation of The City University of New York | United States | Claimed | 8 days ago | |
| COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA | United States | Claimed | 8 days ago | |
| MorseLife | United States | Claimed | 24 days ago | |
| University of Illinois Chicago | United States | Claimed | 26 days ago | |
| Lakewood Medical Centre | Canada | Claimed | 26 days ago | |
| EdgeEndo® USA | United States | Claimed | 26 days ago | |
| Raleigh Family Practice | United States | Claimed | 26 days ago |
Page 1 of 3
Affected countries(11)
Countries where this group has been reported to target or leak victims.