Ransomware needs a way in. Stolen credentials are the cheapest one.

joycity Ransomware Attack

Ransomware victimRansomed

AuditTeamGroup

South KoreaCountry

Sep 27, 2026Discovered

Overview

View group profile

Industry

Technology

Country

South Korea

Discovered

1 day ago

Confidence

90%

Severity

Medium

Status

Claimed

Threat group

AuditTeam

Total victims

First seen

Apr 2026

Last seen

Sep 2026

Threat level

3.6/10

Aggressiveness8.8/10

Lethality0/10

Criticality1.8/10

Status breakdown

Claimed

this victim

100.0%25

Targeted sectors

Education Financial Services Government & Defense Manufacturing Other Retail & E-Commerce Technology

Victim's position within group

Industry

Technology

Known target sector

Country

South Korea

Not a listed target country

Other victims

View all (25)

Same group · AuditTeam

I-SYS
Russia
Claimed
joycity
South Korea
Claimed
Kawasaki Motors Philippines Corporation
Philippines
Claimed
Demidov Steel Group
Russia
Claimed
Trésor Public
Senegal
Claimed
Mopas Online Supermarket
—
Claimed

Group activity

Monthly attacks · AuditTeam

total · avg 5/mo