Ransomware needs a way in. Stolen credentials are the cheapest one.

Morula IVF Ransomware Attack

morulaivf.co.idRansomed

everestGroup

South AfricaCountry

Sep 25, 2026Discovered

Overview

View group profile

Domain

morulaivf.co.id

Industry

Healthcare

Country

South Africa

Discovered

6 days ago

Attack date

Sep 25, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

everest

Total victims

147

First seen

Oct 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

101

Threat level

3.8/10

Aggressiveness10/10

Lethality0/10

Criticality1/10

Status breakdown

Data Leaked0.7%1

Claimed

this victim

99.3%146

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Healthcare

Known target sector

Country

South Africa

Frequently targeted country

Other victims

View all (147)

Same group · everest

Group activity

Monthly attacks · everest

147

total · avg 12.3/mo