Ransomware needs a way in. Stolen credentials are the cheapest one.

FREYWILLE Ransomware Attack

Ransomware victimRansomed

auroraGroup

AustriaCountry

Sep 25, 2026Discovered

Overview

View group profile

Industry

Retail & E-Commerce

Country

Austria

Discovered

12 days ago

Confidence

90%

Severity

Medium

Status

Claimed

Threat group

aurora

Total victims

First seen

Apr 2026

Last seen

Oct 2026

Threat level

2.9/10

Aggressiveness7/10

Lethality0/10

Criticality1.6/10

Status breakdown

Negotiating3.4%2

Claimed

this victim

96.6%56

Targeted sectors

Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Retail & E-Commerce

Known target sector

Country

Austria

Not a listed target country

Other victims

View all (58)

Same group · aurora

Thomas Y. Pickett & Co., Inc.
United States
Claimed
Laboratorios Roemmers SAICF
Argentina
Claimed
US Installation Group, Inc.
—
Claimed
Buford-Thompson Company, LTD
United States
Claimed
FREYWILLE
Austria
Claimed
Van Eijck International Car Rescue
Netherlands
Claimed

Group activity

Monthly attacks · aurora

total · avg 8.3/mo