Ransomware needs a way in. Stolen credentials are the cheapest one.

mecasem.org Ransomware Attack

mecasem.orgRansomed

threeamGroup

FranceCountry

Sep 30, 2026Discovered

Overview

View group profile

Domain

mecasem.org

Industry

Manufacturing

Country

France

Discovered

9 days ago

Confidence

75%

Severity

Medium

Status

Claimed

Threat group

threeam

Total victims

First seen

Oct 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

Threat level

3.4/10

Aggressiveness7/10

Lethality0/10

Criticality3.2/10

Status breakdown

Negotiating1.6%1

Claimed

this victim

98.4%60

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

France

Frequently targeted country

Other victims

View all (61)

Same group · threeam

fleetworksinc.com
—
Claimed
Fleetworks Inc.
United States
Claimed
Industrial Controls SAC
Peru
Claimed
stjames.wa.edu.au
—
Claimed
Jet Machined Products
—
Claimed
midwestbit.com
—
Claimed

Group activity

Monthly attacks · threeam

total · avg 7.6/mo