Ransomware needs a way in. Stolen credentials are the cheapest one.
Sandberg Phoenix Ransomware Attack
Ransomware victimData extortion
Overview
View group profileIndustry
Professional Services
Country
Sweden
Discovered
4 months ago
Attack date
May 8, 2026
Confidence
100%
Severity
Medium
Status
Claimed
Threat group
SilentRansomGroupTotal victims
55
First seen
Sep 2025
Last seen
Jun 2026
Group status
active
Sophistication
0
Impact score
80
Threat level
1.8/10Aggressiveness5/10
Lethality0/10
Criticality0.3/10
Status breakdown
Claimed
this victim
100.0%55Victim's position within group
Industry
Professional Services
Known target sector
Country
Sweden
Frequently targeted country
Other victims
View all (55)Same group · SilentRansomGroup
Group activity
Monthly attacks · SilentRansomGroup
55
total · avg 6.1/mo