Ransomware needs a way in. Stolen credentials are the cheapest one.
Sandberg Phoenix Ransomware Attack
Ransomware victimData extortion
Overview
View group profileIndustry
Professional Services
Country
Sweden
Discovered
5 months ago
Attack date
May 8, 2026
Confidence
100%
Severity
Medium
Status
Claimed
Threat group
SilentRansomGroupTotal victims
620
First seen
Oct 2025
Last seen
Sep 2026
Group status
active
Sophistication
0
Impact score
80
Threat level
1.9/10Aggressiveness5/10
Lethality0/10
Criticality0.4/10
Status breakdown
Claimed
this victim
100.0%88Victim's position within group
Industry
Professional Services
Known target sector
Country
Sweden
Frequently targeted country
Other victims
View all (88)Same group · SilentRansomGroup
Group activity
Monthly attacks · SilentRansomGroup
620
total · avg 62/mo