Frag

Ransomware View on Dark Web

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 7, 2026

Last Seen

June 9, 2026

API

Frag is a ransomware group associated with campaigns that target backup infrastructure, leveraging vulnerabilities in backup servers to gain control and deploy encryption.

Overview

Recent Events

Dark Web Intelligence

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (2)

Critical RCE Vulnerability in Veeam Backup Exposes Organizations to Attacks

Jun 9·11 sources

Veeam Backup & Replication Vulnerabilities Enable RCE Attacks

Jan 7·7 sources

Related Entities

FIN7 Ransomware Data Breach Zero-day Exploit WatchTowr Cuba CVE-2026-44963 CVE-2025-55125 CVE-2025-59468 CVE-2025-59470 T1041 - Exfiltration Over C2 Channel Windows

Frag

Overview

Recent Events

Profile

Objectives

Target Regions

Common TTPs

Associated CVEs

Dark Web Intelligence

Relationships

Related Clusters (2)

Critical RCE Vulnerability in Veeam Backup Exposes Organizations to Attacks

Veeam Backup & Replication Vulnerabilities Enable RCE Attacks

Related Articles (4)

Veeam releases security update for critical backup server vulnerability | brief

New Veeam vulnerability exposes backup servers to RCE attacks

New Veeam vulnerability exposes backup servers to RCE attacks

New Veeam vulnerabilities expose backup servers to RCE attacks

Related Entities