Ransomware needs a way in. Stolen credentials are the cheapest one.
iwin Ransomware Attack
iwin.krRansomed
Data has been published on the ransomware group's leak site.
Overview
View group profileDomain
iwin.kr
Industry
Manufacturing
Country
South Korea
Discovered
about 1 month ago
Attack date
Aug 28, 2026
Confidence
85%
Severity
Critical
Status
Data Leaked
Threat group
Black XTotal victims
11
First seen
Jun 2026
Last seen
Oct 2026
Threat level
3/10Aggressiveness4.3/10
Lethality1.2/10
Criticality3.7/10
Status breakdown
Data Leaked
this victim
23.1%3Claimed76.9%10
Victim's position within group
Industry
Manufacturing
Known target sector
Country
South Korea
Not a listed target country
Other victims
View all (13)Same group · Black X
Group activity
Monthly attacks · Black X
11
total · avg 2.8/mo