Ransomware needs a way in. Stolen credentials are the cheapest one.

باهمتا Ransomware Attack

bahamta.comRansomed

medusalockerGroup

IranCountry

Jul 5, 2026Discovered

Overview

View group profile

Domain

bahamta.com

Industry

Technology

Country

Iran

Discovered

about 1 month ago

Attack date

Jul 5, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

medusalocker

Total victims

First seen

Sep 2025

Last seen

Jul 2026

Threat level

2.3/10

Aggressiveness5/10

Lethality0/10

Criticality1.8/10

Status breakdown

Claimed

this victim

100.0%61

Targeted sectors

Education Energy & Utilities Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Technology

Known target sector

Country

Iran

Not a listed target country

Other victims

View all (61)

Same group · medusalocker

BAKAQAH
—
Claimed
BAEAEAI
—
Claimed
Department of National Defence and Canadian Armed Forces
Canada
Claimed
باهمتا
Iran
Claimed
Estrela
Brazil
Claimed
Karneslegal
United Kingdom
Claimed

Group activity

Monthly attacks · medusalocker

total · avg 12.2/mo