Ransomware needs a way in. Stolen credentials are the cheapest one.
Rumaila Operating Organisation Compromised Ransomware Attack
Ransomware victimData extortion
Overview
View group profileIndustry
Energy & Utilities
Discovered
about 1 month ago
Attack date
Mar 17, 2026
Confidence
90%
Severity
Medium
Status
Claimed
Threat group
nasirsecurityTotal victims
20
First seen
Oct 2025
Last seen
Apr 2026
Group status
active
Sophistication
0
Impact score
42
Threat level
1.7/10Aggressiveness4/10
Lethality0/10
Criticality1/10
Status breakdown
Claimed
this victim
100.0%20Victim's position within group
Industry
Energy & Utilities
Known target sector
Other victims
View all (20)Same group · nasirsecurity
Group activity
Monthly attacks · nasirsecurity
20
total · avg 6.7/mo