About
Aggregated threat-intel descriptionCephalus is a ransomware group active from mid-2025 that leverages stolen RDP credentials to deploy a Go-based ransomware payload via DLL sideloading, targeting law firms, healthcare, financial services, and IT firms across the US and Japan with 19 known victims.
Sectors: Healthcare, Financial Services, Business Services · Countries: US, GB, IE
Recent victims
View all →| Victim | Sector | Country | Posted | Status |
|---|---|---|---|---|
| One-LUX | Not Found | GB | Aug 29, 2025 | |
| Shropdoc | Healthcare | GB | Aug 29, 2025 | |
| Shelbourne Accountants | Financial Services | IE | Aug 29, 2025 | |
| Delta Information Systems | Technology | US | Aug 29, 2025 | |
| Colorado Health Network Inc | Healthcare | US | Aug 28, 2025 | |
| Texas Pregnancy Care Network | Healthcare | US | Aug 28, 2025 | |
| wilderlawfirm | Not Found | Aug 28, 2025 | ||
| CoCo Yachts | Manufacturing | NL | Aug 28, 2025 | |
| txpregnancy.org - Fake Abortion Clinics Exposed | Not Found | US | Aug 26, 2025 | |
| Town of Vienna, VA | Public Sector | US | Aug 26, 2025 | |
| Lewis Baach Kaufmann Middlemiss PLLC | Business Services | US | Aug 26, 2025 | |
| Lee & Associates | Not Found | US | Aug 26, 2025 | |
| Sherman, Silverstein, Kohl, Rose & Podolsky, P.A. | Not Found | US | Aug 26, 2025 | |
| Guerrero Mears LLP | Not Found | US | Aug 26, 2025 | |
| LPL Financial | Financial Services | US | Aug 26, 2025 | |
| K Strategies Marketing and Public Relations | Business Services | US | Aug 26, 2025 | |
| BAR Architects & Interiors | Construction | Aug 26, 2025 | ||
| SystemExec Co., Ltd. | Not Found | Aug 26, 2025 | ||
| CareSTL Health | Healthcare | US | Aug 26, 2025 |