Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure
securotrop Ransomware Group
Ransomware group profile
Description
Securotrop is a ransomware group that emerged in March 2026, evolving from the Qilin ransomware gang. They primarily engage in financial extortion using a double-extortion model that includes data exfiltration and threatening to publish stolen data if ransoms are not paid.
Key insights
- •Utilizes a double-extortion model involving data exfiltration and encryption of victim systems.
- •Threatens to publish sensitive client and employee information on a leak site.
- •Can exfiltrate large volumes of data, ranging from hundreds of gigabytes to over two terabytes.
- •Targets diverse sectors and employs effective compromise vectors for breaches.
- •Motivated primarily by financial gain through extortion.
Threat Level & Status Breakdown
For securotrop · Based on incidents in selected period
Status Breakdown
Recent activity
Monthly attack count for securotrop in the selected period
Intelligence
IOCs, YARA/Sigma rules, and related families for securotrop
- 7eec7d07587112777016e5742c0d002d7e64a3e1fe7bde82fed8f65e3663456a
- e1c371c7c39c16d208bcbaa5b5d0714df696e6ef68b95a880673a904527c8b96
- e06520c65bf27d9110d68ecc0de0e0824c3a99be080ead1a5b5be8fd2a26d12d
- 2c36a2a36a747ee8e1393724c2558b14
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for securotrop
T1486
T1486
T1490
T1490
T1041
T1041
T1562
T1562
T1078
T1078
T1021
T1021
T1021.001
T1021.001
T1561
T1561
T1059
T1059
T1547
T1547
Victims(24)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Advantage Sintered Metals | United States | Claimed | 3 days ago | |
| Synergy Engeneering | — | Claimed | 4 days ago | |
| Tax Prep and More | United States | Claimed | 5 days ago | |
| Prefix Corporation | United States | Claimed | about 1 month ago | |
| Shelco | United States | Claimed | about 2 months ago | |
| ADL Embedded Solutions | United States | Claimed | 2 months ago | |
| Lepi Enterprises Inc. | United States | Claimed | 2 months ago | |
| MAG USA | United States | Claimed | 3 months ago | |
| Advantage Sintered Metals, Inc. | United States | Claimed | 3 months ago | |
| No companies found | — | Claimed | 3 months ago | |
| ProDirectional | United States | Claimed | 4 months ago | |
| Charisma Media | United States | Claimed | 5 months ago | |
| Kriete Truck Centers | United States | Claimed | 5 months ago | |
| Thompson Builders | United States | Claimed | 6 months ago | |
| Synergy Engineering | United States | Claimed | 6 months ago | |
| Jones Haber Law | United States | Claimed | 7 months ago | |
| Universal Mailing Service, Inc. | United States | Claimed | 8 months ago | |
| Marshal Renee | United States | Claimed | 8 months ago | |
| KW Living Realty | Canada | Claimed | 10 months ago | |
| Spartan Carbide | United States | Claimed | 10 months ago |
Page 1 of 2
Affected countries(6)
Countries where this group has been reported to target or leak victims.