Ransomware needs a way in. Stolen credentials are the cheapest one.

MEFA Endüstri Ransomware Attack

Ransomware victimRansomed

—Country

Sep 9, 2026Discovered

Overview

Industry

Government & Defense

Discovered

30 days ago

Confidence

85%

Severity

Medium

Status

Claimed

Total victims

First seen

Oct 2025

Last seen

Sep 2026

Threat level

2.3/10

Aggressiveness5/10

Lethality0.4/10

Criticality1.2/10

Status breakdown

Data Leaked6.9%4

Claimed

this victim

93.1%54

Targeted sectors

Victim's position within group

Industry

Government & Defense

Known target sector

Other victims

Same group · black nevas

Group activity

Monthly attacks · black nevas

total · avg 7.1/mo