About
Written by ThreatCluster from 3 storiesspirals is a ransomware group that appears to operate under an extortion-based model, with reporting indicating encryption is the final visible stage in a broader attack that may include data exfiltration and pressure tactics. The group has 1 claimed victim, with Technology the sector most affected and no recorded data on affected countries. A pattern across the reporting shows campaigns that extend beyond encryption to disable protections—backups are targeted, security tools dismantled, and logs erased before or during encryption. For illustration of the broader pattern, the September 18, 2026 report describes EndZone claiming to compromise Accela.com and steal over 50 GB of data from a government software provider.
Sectors: Financial Services, IT Asset Disposition (ITAD) and e-waste management, Logistics · Countries: AE, OM, UG
Recent victims
View all →| Victim | Sector | Country | Data | Posted | Status |
|---|---|---|---|---|---|
| seven seas group sevenseasgroup.com | Maritime services | AE | — | Oct 9, 2026 | published |
| Armada Credit Bureau | Financial Services | UG | — | Sep 24, 2026 | listed |
| ASYAD GROUP asyad.com | Logistics | Oman | 61.7 KiB | Sep 23, 2026 | published |
| PITTSRAD pittsrad.net | Radiology and health imaging | US | — | Sep 18, 2026 | listed |
| ANYTHINGIT anythingit.com | IT Asset Disposition (ITAD) and e-waste management | — | Sep 18, 2026 | listed |
Found by ThreatCluster
6 total from our crawlListed on this group's leak site and not present in the aggregated feeds.