Ransomware needs a way in. Stolen credentials are the cheapest one.

PLC Trans Ransomware Attack

plc-trans.comData extortion

coinbase cartelGroup

BulgariaCountry

Oct 13, 2025Discovered

Overview

View group profile

Domain

plc-trans.com

Industry

Transportation

Country

Bulgaria

Discovered

11 months ago

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

coinbase cartel

Total victims

196

First seen

Sep 2025

Last seen

Aug 2026

Group status

active

Sophistication

Impact score

Threat level

2.1/10

Aggressiveness5/10

Lethality0/10

Criticality1.2/10

Status breakdown

Data Leaked0.5%1

Claimed

this victim

99.5%195

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Transportation

Known target sector

Country

Bulgaria

Frequently targeted country

Other victims

View all (196)

Same group · coinbase cartel

Group activity

Monthly attacks · coinbase cartel

196

total · avg 16.3/mo