Ransomware needs a way in. Stolen credentials are the cheapest one.

NKAR Travels & Tours Ransomware Attack

Ransomware victimRansomed

payloadGroup

Sri LankaCountry

Mar 30, 2026Discovered

Overview

View group profile

Industry

Hospitality

Country

Sri Lanka

Discovered

6 months ago

Attack date

Mar 30, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

payload

Total victims

First seen

Feb 2026

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

101

Threat level

2.3/10

Aggressiveness5/10

Lethality0/10

Criticality1.7/10

Status breakdown

Claimed

this victim

100.0%77

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Hospitality

Known target sector

Country

Sri Lanka

Frequently targeted country

Other victims

View all (77)

Same group · payload

Neeser Technik AG
Switzerland
Claimed
HWZ-Studiengänge
Switzerland
Claimed
Zara Investment Holding
Spain
Claimed
B&B Hydraulik
Germany
Claimed
Stücheli Architekten
Switzerland
Claimed
Baya Technologies
United States
Claimed

Group activity

Monthly attacks · payload

total · avg 9.6/mo