gammax Ransomware Group
Ransomware group profile
Description
Gammax is a newly emerged extortion and crypto-ransomware operation that began in July 2026, focusing on commercial enterprises and utilities. The group employs a double-extortion model by exfiltrating sensitive data before encrypting files, using a dedicated dark web leak site to compel ransom payments from victims.
Key insights
- •Targets small-to-medium businesses and utilities primarily for financial gain.
- •Utilizes a double-extortion model, threatening public release of exfiltrated data if ransoms are not paid.
- •Gains initial access through targeted phishing, weak RDP exploits, and leaked credentials.
- •Employs rapid data exfiltration tactics to pressure victims into paying ransoms.
- •Caches communications via Tor for anonymity and conducts attacks with obfuscated malicious scripts.
Threat Level & Status Breakdown
For gammax · Based on incidents in selected period
Status Breakdown
Recent activity
Monthly attack count for gammax in the selected period
No intelligence data for this group.
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for gammax
T1562
Impair Defenses
T1059
Command and Scripting Interpreter
T1140
Deobfuscate/Decode Files or Information
T1105
Ingress Tool Transfer
T1486
Data Encrypted for Impact
T1490
Inhibit System Recovery
T1021
Remote Services
T1021.001
Remote Desktop Protocol
T1041
T1041
T1203
T1203
T1078
Valid Accounts
T1547
Boot or Logon Autostart Execution
Victims(6)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| MTCO (Mahmoud Altaheni & Partners Trading Co) MTCO (Mahmoud Altaheni & Partners Trading Company) operates in Saudi Arabia (KSA) and the GCC with 15+ years’ industry experience, established in ... | — | Claimed | 5 days ago | |
| MTCO (Mahmoud Altaheni & Partners Trading Co) | Saudi Arabia | Claimed | 5 days ago | |
| AguAseo AguAseo is a Panamanian organization dedicated to maintaining cleanliness in the province of Colón. It provides solid waste collection and cleaning of... | — | Claimed | 5 days ago | |
| RE/MAX 1st Choice RE/MAX 1st Choice Florida was established in 2005 and is managed by Katy and John Martinelli, who serve as the owners and operators and hold the compa... | — | Claimed | 5 days ago | |
| AguAseo | Colombia | Claimed | 6 days ago | |
| RE/MAX 1st Choice | Canada | Claimed | 6 days ago |
Affected countries(5)
Countries where this group has been reported to target or leak victims.