Ransomware needs a way in. Stolen credentials are the cheapest one.

Hopital La Rabta Ransomware Attack

chularabta.tnRansomed

qilinGroup

TunisiaCountry

Dec 26, 2025Discovered

Overview

View group profile

Domain

chularabta.tn

Industry

Healthcare

Country

Tunisia

Discovered

9 months ago

Attack date

Dec 11, 2025

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

qilin

Total victims

1,473

First seen

Sep 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

123

Threat level

3.9/10

Aggressiveness10/10

Lethality0/10

Criticality1.2/10

Status breakdown

Data Leaked0.5%7

Claimed

this victim

99.5%1,478

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Healthcare

Known target sector

Country

Tunisia

Frequently targeted country

Other victims

View all (1485)

Same group · qilin

Group activity

Monthly attacks · qilin

1,473

total · avg 113.3/mo