Ransomware needs a way in. Stolen credentials are the cheapest one.

Hopital La Rabta Ransomware Attack

chularabta.tnRansomed

devmanGroup

TunisiaCountry

Dec 12, 2025Discovered

Overview

View group profile

Domain

chularabta.tn

Industry

Financial Services

Country

Tunisia

Discovered

10 months ago

Attack date

Dec 11, 2025

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

devman

Total victims

First seen

Oct 2025

Last seen

Feb 2026

Group status

active

Sophistication

Impact score

Threat level

2.6/10

Aggressiveness5/10

Lethality0/10

Criticality2.7/10

Status breakdown

Claimed

this victim

100.0%131

Targeted sectors

Education Financial Services Government & Defense Healthcare Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Financial Services

Known target sector

Country

Tunisia

Frequently targeted country

Other victims

View all (131)

Same group · devman

Crystal Coast Pain Management
United States
Claimed
ENCOMPASS-INC
—
Claimed
Crystal Coast Pain Management Center
United States
Claimed
Encompass Solutions
United States
Claimed
Woodward Oral Surgery
United States
Claimed
Woodward Oral Surgery
United States
Claimed

Group activity

Monthly attacks · devman

total · avg 11.4/mo