Skip to content
Leak-site post naming A-RMS, captured by ThreatCluster

A-RMS

emperador

Ransomware leak-site victim intelligence

Data size
35.5 MB
Files
2
Views
3,883
Posted
Oct 25, 2026
Industry
We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay t

Summary

Written by ThreatClusterfrom leak post

The group emperador claims the victim is A-RMS and that they encrypted the victim's servers and stole source code and sensitive information, totaling 35.5 MB. The leak post is listed on the group's site. They state that if the ransom is not paid, they will contact and attack the victim's employees, clients, and partners to destroy the business.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business.

Data categories
source codesensitive information
File types seen
gz × 1zip × 1
Sample files (2)
mysqldump2.tar.gz
jira-dump.zip

Ransom note

Published by the group on their leak site, reproduced verbatim.

We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business.

Leak-site images (4)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo resembling a geometric figure with sharp angles and a central emblem that suggests a face or mask.
onion leak page1.2 MB
Screenshot of a command-line interface displaying logs with entries related to service conditions and statuses, including "Start" and "Stop" commands.
onion leak page460 KB
Screenshot of SQL code with table creation and data insertion statements, including various data types and values.
onion leak page542 KB