Ransomware needs a way in. Stolen credentials are the cheapest one.

Eighteen Ransomware Attack

eighteenpk.com

clopGroup

PakistanCountry

Nov 21, 2025Discovered

Overview

View group profile

Domain

eighteenpk.com

Industry

Professional Services

Country

Pakistan

Discovered

11 months ago

Attack date

Nov 21, 2025

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

clop

Total victims

374

First seen

Oct 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

150

Threat level

2.2/10

Aggressiveness5/10

Lethality0/10

Criticality1.4/10

Status breakdown

Claimed

this victim

100.0%374

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Professional Services

Known target sector

Country

Pakistan

Frequently targeted country

Other victims

View all (374)

Same group · clop

smapcenter-uah.edu
United States
Claimed
dad-co.th
Thailand
Claimed
cloud-clearwaygroup.com
United States
Claimed
HODERO-HOLDINGS-LTD
Canada
Claimed
kvheli-wordpress.com
Georgia
Claimed
cccm-bc.ca
Canada
Claimed

Group activity

Monthly attacks · clop

374

total · avg 37.4/mo