Ransomware needs a way in. Stolen credentials are the cheapest one.

Red Star Oil Company Ransomware Attack

redstaroil.comRansomed

Play RansomwareGroup

SerbiaCountry

Sep 8, 2026Discovered

Overview

View group profile

Domain

redstaroil.com

Industry

Energy & Utilities

Country

Serbia

Discovered

29 days ago

Attack date

Sep 8, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

Play Ransomware

Total victims

273

First seen

Oct 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

131

Threat level

2.6/10

Aggressiveness7/10

Lethality0/10

Criticality0.5/10

Status breakdown

Claimed

this victim

100.0%273

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Energy & Utilities

Known target sector

Country

Serbia

Frequently targeted country

Other victims

View all (273)

Same group · Play Ransomware

Group activity

Monthly attacks · Play Ransomware

273

total · avg 21/mo