Ransomware needs a way in. Stolen credentials are the cheapest one.

US Installation Group, Inc. Ransomware Attack

Ransomware victimRansomed

—Country

Sep 30, 2026Discovered

Overview

Industry

Other

Discovered

8 days ago

Confidence

90%

Severity

Medium

Status

Claimed

Total victims

First seen

Apr 2026

Last seen

Oct 2026

Threat level

2.9/10

Aggressiveness7/10

Lethality0/10

Criticality1.6/10

Status breakdown

Negotiating3.4%2

Claimed

this victim

96.6%56

Targeted sectors

Victim's position within group

Industry

Other

Known target sector

Other victims

Same group · aurora

Group activity

Monthly attacks · aurora

total · avg 8.3/mo