Ransomware needs a way in. Stolen credentials are the cheapest one.

CR Casting Ransomware Attack

Ransomware victimRansomed

toufanGroup

IsraelCountry

Nov 28, 2025Discovered

Overview

View group profile

Industry

Government & Defense

Country

Israel

Discovered

10 months ago

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

toufan

Total victims

First seen

Oct 2025

Last seen

Mar 2026

Group status

active

Sophistication

Impact score

Threat level

1.9/10

Aggressiveness3.8/10

Lethality0.3/10

Criticality1.4/10

Status breakdown

Data Leaked5.0%1

Claimed

this victim

95.0%19

Targeted sectors

Education Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Government & Defense

Known target sector

Country

Israel

Frequently targeted country

Other victims

View all (20)

Same group · toufan

Optum Industrial Engineering Systems
—
Claimed
Oz Aviation ltd.
—
Claimed
UPC Precision Castings Ltd
—
Claimed
Tefen Metal Castings
Israel
Claimed
Saar Engineering
—
Claimed
Maya Engineering
Israel
Claimed

Group activity

Monthly attacks · toufan

total · avg 4/mo