Ransomware needs a way in. Stolen credentials are the cheapest one.

Yource Bulgaria & Greece Ransomware Attack

yourcebulgaria.ccRansomed

crypto24Group

BulgariaCountry

Jan 21, 2026Discovered

Overview

View group profile

Domain

yourcebulgaria.cc

Industry

Professional Services

Country

Bulgaria

Discovered

8 months ago

Attack date

Dec 30, 2025

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

crypto24

Total victims

First seen

Oct 2025

Last seen

Apr 2026

Group status

active

Sophistication

Impact score

Threat level

2.7/10

Aggressiveness4.8/10

Lethality0/10

Criticality3.5/10

Status breakdown

Claimed

this victim

100.0%19

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Technology

Victim's position within group

Industry

Professional Services

Known target sector

Country

Bulgaria

Frequently targeted country

Other victims

View all (19)

Same group · crypto24

Hamad Bin Khalifa University (HBKU)
Qatar
Claimed
Katcon
Mexico
Claimed
Industrias Guerra
Spain
Claimed
ActionPower
Croatia
Claimed
O’Farrell
Argentina
Claimed
Invaccs
India
Claimed

Group activity

Monthly attacks · crypto24

total · avg 2.7/mo