Ransomware needs a way in. Stolen credentials are the cheapest one.

i-one Ransomware Attack

i-one.co.krRansomed

Black XGroup

South KoreaCountry

Aug 28, 2026Discovered

Data has been published on the ransomware group's leak site.

Overview

View group profile

Domain

i-one.co.kr

Industry

Government & Defense

Country

South Korea

Discovered

about 1 month ago

Attack date

Aug 28, 2026

Confidence

85%

Severity

Critical

Status

Data Leaked

Threat group

Black X

Total victims

First seen

Jun 2026

Last seen

Oct 2026

Threat level

4.3/10

Aggressiveness8/10

Lethality0.9/10

Criticality4.1/10

Status breakdown

Data Leaked

this victim

16.7%3

Claimed83.3%15

Targeted sectors

Education Government & Defense Healthcare Manufacturing Professional Services Technology

Victim's position within group

Industry

Government & Defense

Known target sector

Country

South Korea

Not a listed target country

Other victims

View all (18)

Same group · Black X

Caselaw Access Project
United States
Claimed
iwin
South Korea
Data Leaked
Daechang Solution
South Korea
Claimed
elektroverband-bayern
—
Claimed
Tong Kong E & E Sdn Bhd (95907X)
—
Claimed
African National Congress
South Africa
Claimed

Group activity

Monthly attacks · Black X

total · avg 4.3/mo