About
Aggregated threat-intel descriptionHelldown is an aggressive ransomware group first documented in August 2024, known for exploiting Zyxel firewall vulnerabilities to gain initial access and conducting large-scale data exfiltration averaging 70 GB per victim, targeting IT services, telecommunications, manufacturing, and healthcare primarily in the US.
Sectors: Business Services, Manufacturing, Healthcare · Countries: US, DE, IT
Recent victims
View all →| Victim | Sector | Country | Posted | Status |
|---|---|---|---|---|
| klinkamkurpark | Not Found | DE | Nov 6, 2024 | |
| hausdesstiftens.org | Not Found | DE | Nov 6, 2024 | |
| nightnurse.ch | Healthcare | CH | Nov 6, 2024 | |
| fuelco | Energy | Nov 6, 2024 | ||
| VALLEYFIRM | Not Found | HK | Nov 6, 2024 | |
| children | Not Found | IN | Nov 6, 2024 | |
| knoxlawcenter | Business Services | US | Nov 6, 2024 | |
| AMERICANVENTURE | Not Found | US | Nov 6, 2024 | |
| CSIKBS | Not Found | JP | Nov 6, 2024 | |
| SANJACINTOCOUNY | Not Found | US | Nov 6, 2024 | |
| compassfs | Financial | US | Nov 6, 2024 | |
| lacliniqueducoureur | Healthcare | CA | Nov 6, 2024 | |
| TIVOLI-33 | Not Found | FR | Nov 6, 2024 | |
| qualiform.cz | Manufacturing | CZ | Nov 6, 2024 | |
| SMARTS-ENGINEER | Technology | RU | Nov 6, 2024 | |
| HBGJEWISHCOMMUN | Government | US | Aug 24, 2024 | |
| barryavenueplating | Manufacturing | US | Aug 23, 2024 | |
| cincinnatipainphysicians | Healthcare | US | Aug 22, 2024 | |
| kbosecurity.co.uk | Business Services | GB | Aug 22, 2024 | |
| khonaysser.com | Energy | LB | Aug 22, 2024 | |
| BARRYAVEPLATING | Manufacturing | US | Aug 21, 2024 | |
| RSK-IMMOBILIEN | Business Services | DE | Aug 21, 2024 | |
| ATP | Business Services | IT | Aug 20, 2024 | |
| Khonaysser | Energy | LB | Aug 19, 2024 | |
| kbo | Not Found | GB | Aug 18, 2024 |