Ransomware needs a way in. Stolen credentials are the cheapest one.
SJL Ransomware Attack
Ransomware victimRansomed
Overview
View group profileIndustry
Professional Services
Country
Luxembourg
Discovered
8 months ago
Confidence
85%
Severity
Medium
Status
Claimed
Threat group
ms13-089Total victims
9
First seen
Dec 2025
Last seen
Aug 2026
Group status
active
Sophistication
0
Impact score
36
Threat level
2/10Aggressiveness2/10
Lethality0/10
Criticality4.2/10
Status breakdown
Claimed
this victim
100.0%9Victim's position within group
Industry
Professional Services
Known target sector
Country
Luxembourg
Frequently targeted country
Other victims
View all (9)Same group · ms13-089
Group activity
Monthly attacks · ms13-089
9
total · avg 2.3/mo