Ransomware needs a way in. Stolen credentials are the cheapest one.
AUDIT ENTITY: [ COOPERATION REACHED ] China Ransomware Attack
Ransomware victimRansomed
Overview
View group profileIndustry
Government & Defense
Country
China
Discovered
4 months ago
Confidence
70%
Severity
Medium
Status
Claimed
Threat group
audit teamTotal victims
6
First seen
Apr 2026
Last seen
May 2026
Threat level
0.5/10Aggressiveness1.5/10
Lethality0/10
Criticality0/10
Status breakdown
Claimed
this victim
100.0%6Targeted sectors
Victim's position within group
Industry
Government & Defense
Known target sector
Country
China
Not a listed target country
Other victims
View all (6)Same group · audit team
AUDIT ENTITY: Mopas Online Supermarket
—
ClaimedAUDIT ENTITY: Trésor Public
—
ClaimedAUDIT ENTITY: [ COOPERATION REACHED ] China
China
ClaimedAUDIT ENTITY: [ COOPERATION REACHED ] Hong Kong
Hong Kong
ClaimedAUDIT ENTITY: joycity
South Korea
ClaimedAUDIT ENTITY: Kawasaki Motors Philippines Corporation
Philippines
Claimed
Group activity
Monthly attacks · audit team
6
total · avg 3/mo