Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 7 September 2026
Ransomware Rebounds as Critical RCEs Surface
The Gentlemen leads 200 tracked claims as ransomware reaches 42 events; N-central, Magento, ScreenConnect and PEEP raise urgent defense priorities.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-09-07
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- RansomwareZanini Auto Group falls victim to The Gentlemen ransomwareThe GentlemenSpain7 Sept
- RansomwareSoni Dwarkadas Virchand Jewellers falls victim to The Gentlemen ransomwareThe GentlemenIndia7 Sept
- RansomwareYapı Merkezi falls victim to The Gentlemen ransomwareThe GentlemenTurkey7 Sept
- Data BreachAlleged Sale of Lucid Motors DataCarportUnited States7 Sept
- RansomwareS&A Consultores Asociados falls victim to The Gentlemen ransomwareThe GentlemenChile7 Sept
- RansomwareSharp Office falls victim to The Gentlemen ransomwareThe GentlemenAustralia7 Sept
- RansomwareChip7 falls victim to The Gentlemen ransomwareThe GentlemenPortugal7 Sept
- RansomwareNile Projects & Trading Co. falls victim to The Gentlemen ransomwareThe GentlemenEgypt7 Sept
- Access BrokerageAlleged unauthorized access of PT Persero BatamvoidxIndonesia7 Sept
- RansomwareUniversity of San Francisco falls victim to The Gentlemen ransomwareThe GentlemenUnited States7 Sept
- DDoSTeam1914_official targets the website of German National Tourist BoardTeam1914_officialGermany7 Sept
- RansomwareMutant falls victim to The Gentlemen ransomwareThe GentlemenBrazil7 Sept
- RansomwareDroguería Saporiti falls victim to The Gentlemen ransomwareThe GentlemenArgentina7 Sept
- VulnerabilityAlleged Sale of Magento 2 RCE ExploitTylerDurden—7 Sept
- Data BreachAlleged Data Sale of Kale & Shinde AssociatesvoidxIndia7 Sept
- Data LeakAlleged Sale of 1Fuel DataRancagiov—7 Sept
- Data LeakAlleged sale of data from an unidentified application from Indiareals3cIndia7 Sept
- Data LeakAlleged Data Leak of the U.S. Department of DefenseElite SquadUnited States7 Sept
- RansomwareDroguería Saporiti S.A.C.I.F.I.A. Falls Victim to The Gentlemen RansomwareThe GentlemenArgentina7 Sept
- RansomwareHollard Insurance Falls Victim to The Gentlemen RansomwareThe GentlemenSouth Africa7 Sept
- Data BreachAlleged Data Leak of Rudy CarezzevoliSophiaItaly7 Sept
- Data BreachAlleged Sale of Fulker DatabaseSophiaItaly7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the IranwpdealerIran7 Sept
- RansomwareBenshaw, Inc. falls victim to Aur0ra RansomwareAur0raUnited States7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowpdealerMexico7 Sept
- DDoSStarPez target the website of Top brand awardStarPezIndonesia7 Sept
- RansomwareCyberattack hits GRANDI Group—Taiwan7 Sept
- DDoSTHE GARUDA EYE targets the website of Satu data indonesiaTHE GARUDA EYEIndonesia7 Sept
- Data LeakAlleged Sale of Creacity DatabaseSophiaItaly7 Sept
- RansomwareSemper Laser falls victim to Dire Wolf RansomwareDire WolfUnited States7 Sept
- Access BrokerageAlleged unauthorized access to U.S. water supplyGolden falconUnited States7 Sept
- Access BrokerageAlleged Sale of Unauthorized Serbia RDP AccessBig-BroSerbia7 Sept
- RansomwareEllisDon Falls Victim to Metaencryptor Team RansomwareMetaencryptor TeamCanada7 Sept
- DDoSStarPez targets the website of pisingyokbaru.siteStarPez—7 Sept
- Access BrokerageAlleged sale of unauthorized access to unidentified organization from SerbiaBigBroSerbia7 Sept
- RansomwareJBC Soldering Tools Falls Victim to Qilin RansomwareQilinSpain7 Sept
- Web DefacementTeaM_CC targets the website of Instituto Nacional de Pesquisas Espaciais (INPE)TeaM_CCBrazil7 Sept
- Web DefacementFor Close System - F.C.S targets the website of seemenatural.comFor Close System - F.C.S—7 Sept
- Data LeakAlleged Sale of 900 U.S. Credit Card Recordscolor51881United States7 Sept
- RansomwareST Engineering Falls Victim to Metaencryptor Team RansomwareMetaencryptor TeamSingapore7 Sept
- RansomwareSIFCO Industries, Inc Falls Victim to Metaencryptor Team RansomwareMetaencryptor TeamUnited States7 Sept
- Data BreachAlleged Sale of Pakistan International Airlines Flight DatabaseSilentHexPakistan7 Sept
- Web DefacementCoupDeGrace targets the website of Dorna FarmCoupDeGraceIran7 Sept
- RansomwareHologic, Inc. Falls Victim to Metaencryptor Team RansomwareMetaencryptor TeamUnited States7 Sept
- Data LeakAlleged sale of 237 million records of personal information from USA and CanadaB666United States, Canada7 Sept
- VulnerabilityConnectWise Warns of Unpatched ScreenConnect File-Transfer Vulnerability—United States7 Sept
- Data BreachAlleged Leak of Columbia Asia Indonesia DatabasexxeonIndonesia7 Sept
- Web DefacementCYBER TEAM INDONESIA targets the website of ABC StorageCYBER TEAM INDONESIAUnited States7 Sept
- Access BrokerageAlleged Sale of OAE Online Shop Accountmr.crabs—7 Sept
- DDoSNoName targets the website of 4BrokerNetNoName057(16)Poland7 Sept
- DDoSNoName targets the website of MaskpolNoName057(16)Poland7 Sept
- DDoSNoName targets the website of Gamrat S.A.NoName057(16)Poland7 Sept
- Web DefacementEbRaHiM-VaKeR targets the website of zorexis.comEbRaHiM-VaKeR—7 Sept
- Access BrokerageAlleged Sale of Unauthorized Portugal 3 VPN AccessespersonXPortugal7 Sept
- Web DefacementMR~TNT targets the website of IskitMR~TNTIsrael7 Sept
- Access BrokerageAlleged unauthorized access to Algerian Ministry of National Defense SystemsInfrastructure Destruction SquadAlgeria7 Sept
- Web DefacementCoupDeGrace targets the website of Moshaverane AlphaCoupDeGraceIran7 Sept
- Access BrokerageAlleged Sale of Unauthorized VPN access to an Unidentified manufacturing company in Saudi Arabianhello123baby123Saudi Arabia7 Sept
- Data BreachAlleged data breach of Gazzetta d'AstiSophia01Italy7 Sept
- Data BreachAlleged data breach of Cia de Trade MKTCrimsonBlackBrazil7 Sept
- Web DefacementCYBER ARBAB targets the website of Shiva StyleCYBER ARBABIran7 Sept
- Web DefacementEbRaHiM-VaKeR targets the website of dpportal.comEbRaHiM-VaKeR—7 Sept
- Data LeakAlleged Data Leak of CinqueT Italian Urban Transport WebsiteSophiaItaly7 Sept
- Data BreachAlleged data breach of Special Project ChavimochicST4RSHINYPeru7 Sept
- Data LeakAlleged Leak of BumFot User DatabaseAlduinFrance7 Sept
- Web DefacementYUKA STREAM targets the website of Pemerintah Kabupaten SragenYUKA STREAMIndonesia7 Sept
- Data LeakAlleged Sale of US and European ID DocumentsPapyrusUnited States7 Sept
- Access BrokerageAlleged unauthorized access to the SCADA control system of PT Bumi Beliti AbadiInfrastructure Destruction SquadIndonesia7 Sept
- Data LeakAlleged Data Leak of Avellino Calcio Football WebsiteSophiaItaly7 Sept
- Data LeakAlleged Leak of VRLab.it User Login DatabaseSophiaItaly7 Sept
- Data LeakAlleged Data Leak of Indian Army DatabaseTeam Hazardous PakistanIndia7 Sept
- RansomwareLibrería Santa Fe A.P.S. S.R.L. Falls Victim to VEXY RansomwareVEXYArgentina7 Sept
- DDoSNoName targets the website of Landkreis SaalekreisNoName057(16)Germany7 Sept
- DDoSNoName targets the website of S-Bahn HannoverNoName057(16)Germany7 Sept
- DDoSNoName057(16) targets the website of NASA GmbHNoName057(16)Germany7 Sept
- DDoSNoName targets the website of Landeshauptstadt ErfurtNoName057(16)Germany7 Sept
- DDoSNoName057(16) targets the website of Kreis OHNoName057(16)Germany7 Sept
- Data BreachAlleged data sale of HEALTH TIMEKazuSpain7 Sept
- Access BrokerageAlleged unauthorized access to Pogrom(s)Elite SquadUnited States7 Sept
- Access BrokerageJavaneseTeam targets the website of Badan Kepegawaian Pendidikan dan Pelatihan (BKPP)JavaneseTeamIndonesia7 Sept
- Access BrokerageJavaneseTeam targets the website of Pemerintah Kabupaten Rokan HuluJavaneseTeamIndonesia7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowpdealerMexico7 Sept
- Access BrokerageAlleged unauthorized access to Lies and TearsElite Squad—7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the IsraelwordpressoIsrael7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the IsraelwpdealerIsrael7 Sept
- Access BrokerageAlleged Sale of Unauthorized Claude API AccessFullzcartelUnited States7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowpdealerMexico7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the MexicowpdealerMexico7 Sept
- Access BrokerageAlleged sale of unauthorized access to an unidentified organization in the Saudi ArabiawpdealerSaudi Arabia7 Sept
- Web Defacements3xyl4rp team targets the website of Municipalidad de San Miguel PetapaS3xyL4rp teamGuatemala7 Sept
- Web Defacementdr3n4k targets the website of District Municipality of Pucayacudr3n4kPeru7 Sept
- Data BreachAlleged data leak of Universidad Nacional de Misiones(UNAM)TerroahOverArgentina7 Sept
- RansomwareBen Leeds Properties falls victim to SHADOWBYT3$ RansomwareSHADOWBYT3$United States7 Sept
- Web Defacementdr3n4k targets the website of Municipal de Valle de Zaragozadr3n4kMexico7 Sept
- Web Defacementdr3n4k targets the website of Municipality of Vicentinadr3n4kBrazil7 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of sains62jakarta.my.canva.siteRBL LEVIATHAN GHOST—7 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of The Academic College of Tel-Aviv, YaffoRBL LEVIATHAN GHOSTIsrael7 Sept
- Access BrokerageAlleged unauthorized access to TeslatorelolUnited States7 Sept
- Data BreachAlleged data breach of JinkoDaOnlySparkFrance7 Sept
- Data BreachAlleged sale of Condé Nast databaseluvUnited States7 Sept
- Data BreachAlleged data breach of Hospital AlemánNeonBreachGermany7 Sept
- Access BrokerageAlleged sale of unauthorized root access to a Mega Gasolineras, S.A. de C.V.RezeMexico7 Sept
- Access BrokerageAlleged unauthorized admin access to the Prefeitura Municipal de RincãoKeishellBrazil7 Sept
- RansomwareMSM Unify falls victim to Kazu RansomwareKazuCanada7 Sept
- Malware OpsAlleged sale of fully autonomous AI penetration testing agentcatboyBF—7 Sept
- DDoSBD Anonymous targets the website of the Centre of Registers and Information SystemsBD AnonymousEstonia7 Sept
- Web DefacementDisrupt0r 2.0 targets the website of Government of GoaDisrupt0r 2.0India7 Sept
- Web DefacementCoupDeGrace targets the website of FireserverCoupDeGraceIran7 Sept
- Data BreachAlleged sale of HSBC Bank DatabaseMarxUnited Kingdom7 Sept
- RansomwareAlleged data breach of MedelaShinyHuntersSwitzerland7 Sept
- Web DefacementCoupDeGrace targets the website of NibaakCoupDeGraceIran7 Sept
- Data LeakAlleged data leak of steam.comMarx—7 Sept
- Access BrokerageAlleged sale of unauthorized access to a US software company888United States7 Sept
- Data BreachAlleged data breach of the United States Department of WarDieNetUnited States7 Sept
- Access BrokerageAlleged unauthorized access to Pierre RehovDieNet—7 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of MahaBhartiRBL LEVIATHAN GHOSTIndia7 Sept
- Data BreachAlleged data breach of ClaroGordonFreemanBrazil7 Sept
- Data BreachAlleged data leak of The Wharton SchoolGhostLeakersUnited States7 Sept
- Data BreachAlleged leak of Iraqi Ministry of Interior corruption-related documentwlkefwefweIraq7 Sept
- Data BreachAlleged sale of PayPal DatabaseMarxUnited States7 Sept
- Access BrokerageAlleged unauthorized access to SAGE Editorial Management platformKeishellUnited States7 Sept
- DDoSDark Storm Team targets the website of Parliament of EstoniaDark Storm TeamEstonia7 Sept
- DDoSDark Storm Team targets multiple subdomains of Estonian Ministry of FinanceDark Storm TeamEstonia7 Sept
- Access BrokerageAlleged unauthorized access to Vietnam National Single Window PortalKeishellVietnam7 Sept
- DDoSDark Storm Team targets the website of LHVDark Storm TeamEstonia7 Sept
- DDoSDark Storm Team targets the website of Inges Kindlustus ASDark Storm TeamEstonia7 Sept
- Cyber OperationCyberattack hits JetBrains—Czech Republic7 Sept
- DDoSMedusa Network targets the website of MetaMedusa NetworkUnited States7 Sept
- DDoSDark Storm Team targets the website of Gren Viru ASDark Storm TeamEstonia7 Sept
- DDoSDark Storm Team targets the website of Astri GroupDark Storm TeamEstonia7 Sept
- DDoSMedusa Network targets the website of MetaMedusa NetworkUnited States7 Sept
- Malware OpsAlleged sale of Forum Bumping Toolaisus—7 Sept
- Access BrokerageAlleged data sale of Directorate General of Population and Civil RegistrationCYBER4RD INDONESIAIndonesia7 Sept
- DDoSTeam1914_official targets the website of FreeTVTeam1914_officialIsrael7 Sept
- Web DefacementCoupDeGrace targets the website of Taheri Construction GroupCoupDeGraceIran7 Sept
- Malware OpsAlleged sale of Allium Loader & C2 FrameworkPyrite—7 Sept
- DDoSTeam1914_official targets the website of TV Israel LiveTeam1914_officialIsrael7 Sept
- DDoSTeam1914_official targets the website of Bank of IsraelTeam1914_officialIsrael7 Sept
- DDoSTeam1914_official targets the website of Government of CanadaTeam1914_officialCanada7 Sept
- Access BrokerageAlleged unauthorized access to Private mailCohd3xx—7 Sept
- Web DefacementameN target the website of CAFSameNIran7 Sept
- Web Defacementjoje-lammer targets the website of soliads.irjoje-lammerIran7 Sept
- Web DefacementCoupDeGrace targets the website of RemidoCoupDeGraceIran7 Sept
- Web DefacementHunter Bajwa targets the website of Financial Services InstituteHunter BajwaEgypt7 Sept
- Access BrokerageAlleged webshell access of clipitloveitwearit.comPharaoh's Team Channel—7 Sept
- Access BrokerageAlleged webshell access of kairos.hrPharaoh's Team ChannelCroatia7 Sept
- Access BrokerageAlleged leak of unauthorized login credentials to General Election Supervisory AgencyPhiserXmanIndonesia7 Sept
- Web Defacement0x6ick targets subdomains of Horizon Beams Establishment0x6ickSaudi Arabia7 Sept
- Access BrokerageAlleged unauthorized access of US E-Commerce websiteFucksleepUnited States7 Sept
- Data BreachMathspace Suffers Data Breach—Australia7 Sept
- Data BreachAlleged Data Breach of VediclineSensitive2025India7 Sept
- Access BrokerageAlleged Sale of Unauthorized Webmail Access to argtrading.aeX Forum BotUnited Arab Emirates7 Sept
- Data BreachAlleged Data Breach of REAKTOR24md6Russia7 Sept
- Access BrokerageAlleged Unauthorized Access to Vijan MahalPharaoh's Team ChannelIndia7 Sept
- Access BrokerageAlleged Unauthorized Access to an Unidentified agricultural SCADA in IranDisrupt0r 2.0Iran7 Sept
- DDoSVinzXmodz targets the website of khogamefree.comVinzXmodz—7 Sept
- Access BrokerageAlleged unauthorized webshell access to PELTArxhfox HeartBrokenMexico7 Sept
- Access BrokerageAlleged unauthorized access to oncostop.eletest.ruPharaoh's Team ChannelRussia7 Sept
- Access BrokerageAlleged unauthorized access to Aesthetic Photo Presets StorePharaoh's Team Channel—7 Sept
- Access BrokerageAlleged unauthorized access to Laurus Slow SpaPharaoh's Team ChannelCroatia7 Sept
- Threat AlertUniT 313 claims to target IsraelUniT 313Israel7 Sept
- Access BrokerageAlleged unauthorized access to designstudio-69.comPharaoh's Team Channel—7 Sept
- Access BrokerageAlleged unauthorized access to Confessions of a Microfinance HereticPharaoh's Team Channel—7 Sept
- Access BrokerageAlleged unauthorized access to HypnoteasePharaoh's Team ChannelFrance7 Sept
- Access BrokerageAlleged unauthorized access to AI How HubPharaoh's Team Channel—7 Sept
- Access BrokerageAlleged unauthorized access to AZ EnterprisePharaoh's Team ChannelBangladesh7 Sept
- Access BrokerageAlleged unauthorized access to South Carolina EncyclopediaPharaoh's Team ChannelUnited States7 Sept
- Data LeakAlleged sale of data from US consumer information databaseLucasarsenalUnited States7 Sept
- RansomwareRoad Transport Administration Department Falls Victim to DYSPHOR1A RansomwareDYSPHOR1AMyanmar7 Sept
- Data LeakAlleged Sale of Personal, Business, and Cryptocurrency Accountsacc—7 Sept
- Data BreachAlleged Data Breach of Centre Atlantique FormationxNovMorocco7 Sept
- Access BrokerageAlleged unauthorized access to Alborz TranscoPharaoh's Team ChannelIran7 Sept
- Access BrokerageAlleged unauthorized access to multiple websites from IndiaPharaoh's Team ChannelIndia7 Sept
- Access BrokerageAlleged unauthorized access of Indian Energy EntityExecutiveIndia7 Sept
- Web DefacementCoupDeGrace targets the website of IECENCoupDeGraceIran7 Sept
- DDoSTeam1914_official targets the website of CCB IndonesiaTeam1914_officialIndonesia7 Sept
- DDoS[ POWER PROOF FULL ORBIT STRESSER L7/L4 ] targets the website of Stresse.st[ POWER PROOF FULL ORBIT STRESSER L7/L4 ]—7 Sept
- DDoSStarPez targets the website of XiaoheiStarPez—7 Sept
- Data BreachAlleged Data Breach of the U.S. Department of Justice and FBICrimsonBlackUnited States7 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of Dalia PowerRBL LEVIATHAN GHOSTIsrael7 Sept
- RansomwareeAssist Dental Solutions falls victim to Dire Wolf RansomwareDire WolfUnited States7 Sept
- Cyber OperationCyber Attack Hit Tirupati Sugars Limited—India7 Sept
- DDoSRBL LEVIATHAN GHOST targets the website of Yad SarahRBL LEVIATHAN GHOSTIsrael7 Sept
- Access BrokerageAlleged unauthorized access of Indian Energy SectorExecutiveIndia7 Sept
- Data LeakAlleged Data Leak Of Jordanian Intelligence OfficersjohndoeS4DJordan7 Sept
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.