Ransomware needs a way in. Stolen credentials are the cheapest one.

Rumaila Operating Organisation Compromised Ransomware Attack

Ransomware victimData extortion

nasirsecurityGroup

—Country

Aug 22, 2026Discovered

Overview

View group profile

Industry

Energy & Utilities

Discovered

10 days ago

Attack date

Mar 17, 2026

Confidence

90%

Severity

Medium

Status

Claimed

Threat group

nasirsecurity

Total victims

First seen

Oct 2025

Last seen

Apr 2026

Group status

active

Sophistication

Impact score

Threat level

1.4/10

Aggressiveness2.5/10

Lethality0/10

Criticality1.7/10

Status breakdown

Claimed

this victim

100.0%10

Targeted sectors

Education Energy & Utilities Government & Defense Hospitality Manufacturing Other Technology Transportation

Victim's position within group

Industry

Energy & Utilities

Known target sector

Other victims

View all (10)

Same group · nasirsecurity

Yad Vashem
Israel
Claimed
Kuwait Ministry Of Interior !
Kuwait
Claimed
Dubai Airport - ed
United Arab Emirates
Claimed
Federal Customs Authority
United Arab Emirates
Claimed
Al-Safi Oil Company (PURE IN)
—
Claimed
Rumaila Operating Organisation Compromised
—
Claimed

Group activity

Monthly attacks · nasirsecurity

total · avg 3.3/mo