Ransomware needs a way in. Stolen credentials are the cheapest one.

hd-werkstaetten.de Ransomware Attack

hd-werkstaetten.deRansomed

zawooGroup

GermanyCountry

Sep 30, 2026Discovered

Overview

View group profile

Domain

hd-werkstaetten.de

Industry

Healthcare

Country

Germany

Discovered

9 days ago

Confidence

75%

Severity

Medium

Status

Claimed

Threat group

zawoo

Total victims

First seen

Aug 2026

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

Threat level

2.4/10

Aggressiveness5/10

Lethality0/10

Criticality2.2/10

Status breakdown

Claimed

this victim

100.0%37

Targeted sectors

Education Energy & Utilities Financial Services Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology

Victim's position within group

Industry

Healthcare

Known target sector

Country

Germany

Frequently targeted country

Other victims

View all (37)

Same group · zawoo

hd-werkstaetten.de
Germany
Claimed
FRM - Fabrica de Mancais, Rolamentos e Soluções Industriais
Brazil
Claimed
Heidelberger Werkstätten
Germany
Claimed
ACQBUILT
Canada
Claimed
KDYNIUM
Czech Republic
Claimed
Winterdienst-Gesellschaft SÜD-OST
Germany
Claimed

Group activity

Monthly attacks · zawoo

total · avg 18.5/mo