Ransomware Intelligence

Ransomware needs a way in. Stolen credentials are the cheapest one.

Check Your Exposure

MAS Holdings Ransomware Attack

masholdings.com

clopGroup

Sri LankaCountry

Nov 20, 2025Discovered

Overview

View group profile

Domain

masholdings.com

Industry

Manufacturing

Country

Sri Lanka

Discovered

10 months ago

Attack date

Nov 20, 2025

Confidence

70%

Severity

Medium

Status

Claimed

Threat group

Total victims

297

First seen

Oct 2025

Last seen

Sep 2026

Group status

active

Sophistication

0

Impact score

150

Threat level

2.1/10

Aggressiveness5/10

Lethality0/10

Criticality1.1/10

Status breakdown

Claimed

this victim

100.0%297

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

Sri Lanka

Frequently targeted country

Other victims

Same group · clop

Group activity

Monthly attacks · clop

297

total · avg 29.7/mo