Ransomware needs a way in. Stolen credentials are the cheapest one.

ILDefenseLeaks : UPC Precision Castings Ltd – “upccastings.com” Ransomware Attack

Ransomware victimRansomed

toufanGroup

PalestineCountry

Dec 12, 2025Discovered

Overview

View group profile

Industry

Other

Country

Palestine

Discovered

8 months ago

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

toufan

Total victims

First seen

Sep 2025

Last seen

Mar 2026

Group status

active

Sophistication

Impact score

Threat level

2.3/10

Aggressiveness5/10

Lethality0.6/10

Criticality1/10

Status breakdown

Data Leaked11.1%4

Claimed

this victim

88.9%32

Targeted sectors

Education Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Other

Known target sector

Country

Palestine

Not a listed target country

Other victims

View all (36)

Same group · toufan

Optum Industrial Engineering Systems
—
Claimed
Saar Engineering – “saarengineer.com”
—
Claimed
Oz Aviation ltd.
—
Claimed
ACOM Communication Strategies
—
Claimed
UPC Precision Castings Ltd – “upccastings.com”
—
Claimed
Maya Engineering – “maya-il.com”
Israel
Claimed

Group activity

Monthly attacks · toufan

total · avg 6/mo