Back Ransomware.Live

🏴‍☠️ Thegentlemen has just published a new victim : Somit

Ransomware.Live • September 15, 2026

Share: View original

This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).

The following DNS records were found for the victim's domain.

domain.operations web.com

somit-com.mail.protection.outlook.com. Microsoft 365

v=spf1 ip4:181.189.144.35 ip4:186.151.230.178 ip4:192.185.4.45 include:spf.protection.outlook.com include:spf.sendinblue.com mx ~all

sendinblue-code:e71db75487ff37e694ca1696bcf202a9

_cl62uhe9xerjxea6xxmeq0sz95jjh95

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content . The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Ransomware Attacks Target Various Organizations In September 2026, multiple organizations, including watchops.com and geekybunch.com, were reported as victims of ransomware attacks by the group known as 'unsafe'. The incidents were listed on dark web leak sites, but details regarding the nature of the attacks, such as data encryption or theft, remain vague. The affected companies reported revenues of approximately $1.3 million and $5 million, respectively. Additionally, other victims like Downrite Engineering, Hattiesburg Eye Clinic, and Technical Asia were also named in the reports. The attack methods and specific vulnerabilities exploited were not disclosed, leaving the scope and impact of these incidents largely unknown. The reports emphasize the need for caution, as many claims remain unverified. Overall, the current status indicates ongoing threats without confirmed data breaches. 195 sources 53

Extracted Entities

🏴‍☠️ Thegentlemen has just published a new victim : Somit

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Domains (4)

IP Addresses (3)

MD5 Hashes (1)

Platforms (1)