Ransomware Intelligence

Ransomware needs a way in. Stolen credentials are the cheapest one.

Check Your Exposure

MAS Holdings Ransomware Attack

masholdings.com

clopGroup

Sri LankaCountry

Nov 20, 2025Discovered

Overview

View group profile

Domain

masholdings.com

Industry

Manufacturing

Country

Sri Lanka

Discovered

11 months ago

Attack date

Nov 20, 2025

Confidence

70%

Severity

Medium

Status

Claimed

Threat group

Total victims

374

First seen

Oct 2025

Last seen

Sep 2026

Group status

active

Sophistication

0

Impact score

150

Threat level

2.2/10

Aggressiveness5/10

Lethality0/10

Criticality1.4/10

Status breakdown

Claimed

this victim

100.0%374

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

Sri Lanka

Frequently targeted country

Other victims

Same group · clop

Group activity

Monthly attacks · clop

374

total · avg 37.4/mo