Frag Ransomware — Victims, Campaigns & Activity

Overview

Frag is a ransomware group associated with campaigns that target backup infrastructure, leveraging vulnerabilities in backup servers to gain control and deploy encryption. Its focus on compromising backup environments increases the impact and extortion potential, making it a notable threat in the cybersecurity landscape.

Related Threat Clusters

• Critical RCE Vulnerability in Veeam Backup Exposes Organizations to Attacks

  Veeam has disclosed a critical vulnerability (CVE-2026-44963) affecting its Backup & Replication software, allowing authenticated domain users to execute remote code on domain-joined backup servers. This flaw impacts…

  11 articles · Updated June 9, 2026
• Veeam Backup & Replication Vulnerabilities Enable RCE Attacks

  Veeam has issued security updates to address multiple vulnerabilities in its Backup & Replication software, including a critical remote code execution (RCE) flaw tracked as CVE-2025-59470. This vulnerability affects…

  7 articles · Updated January 7, 2026

Recent Intelligence Reports

• Veeam releases security update for critical backup server vulnerability | brief — Scworld · June 9, 2026
• New Veeam vulnerability exposes backup servers to RCE attacks — Bleepingcomputer · June 9, 2026
• New Veeam vulnerability exposes backup servers to RCE attacks — Bleepingcomputer · June 9, 2026
• New Veeam vulnerabilities expose backup servers to RCE attacks — Bleepingcomputer · January 7, 2026

Related Entities