Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Threat Actors unsafe

unsafe

TLP:CLEAR
Active
Kill Chain Analysis Generate Graph Hunt Package

Description

A group which seems to recycle leak from other ransomware groups Known victims: 14

Goals & Targeting

Objectives

Ransomware
Financial Gain

AI Analysis

No AI analysis yet.

ATT&CK Techniques

No techniques linked yet.

Software / Tooling

No tools linked yet.

Campaigns / Victims

All campaigns →
Inactive

unsafe: Presentations.AI

Ransomware attack attributed to unsafe. | Country: US | Sector: Technology | Website: Presentations.AI | Revenue: $5 million | Source: https://www.ransomware.live/id/UHJlc2VudGF0aW9ucy5BSUB1bnNhZmU=

Aug 10, 2026

TLP:CLEAR
Inactive

unsafe: DECK APP TECHNOLOGIES PTE. LTD

Ransomware attack attributed to unsafe. | Country: IN | Sector: Technology | Website: deck.in | Infostealer data confirmed. | Revenue: $5 million | Source: https://www.ransomware.live/id/REVDSyBBUFAgVEVDSE5PTE9HSUVTIFBURS4gTFREQHVuc2FmZQ==

Aug 10, 2026

TLP:CLEAR
Inactive

unsafe: Constellation HomeBuilder Systems

Ransomware attack attributed to unsafe. | Country: US | Sector: Manufacturing | Website: Constellation HomeBuilder Systems | Revenue: $138.1M | Source: https://www.ransomware.live/id/Q29uc3RlbGxhdGlvbiBIb21lQnVpbGRlciBTeXN0ZW1zQHVuc2FmZQ==

Aug 9, 2026

TLP:CLEAR
Inactive

unsafe: Jiva Health

Ransomware attack attributed to unsafe. | Country: IN | Sector: Healthcare | Website: Jiva Health | Revenue: 9 million | Source: https://www.ransomware.live/id/Sml2YSBIZWFsdGhAdW5zYWZl

Jul 24, 2026

TLP:CLEAR
Inactive

unsafe: CCR Solutions

Ransomware attack attributed to unsafe. | Country: BR | Sector: Business Services | Website: CCR Solutions | Revenue: 41 million | Source: https://www.ransomware.live/id/Q0NSIFNvbHV0aW9uc0B1bnNhZmU=

Jul 19, 2026

TLP:CLEAR
Inactive

unsafe: Deutsche Bank

Ransomware attack attributed to unsafe. | Country: DE | Sector: Financial Services | Website: db.com | Infostealer data confirmed. | Revenue: 30 billion | Source: https://www.ransomware.live/id/RGV1dHNjaGUgQmFua0B1bnNhZmU=

Jul 4, 2026

TLP:CLEAR
Inactive

unsafe: straightperformance.de

Ransomware attack attributed to unsafe. | Country: DE | Sector: Business Services | Website: straightperformance.de | Infostealer data confirmed. | Revenue: 2 million | Source: https://www.ransomware.live/id/c3RyYWlnaHRwZXJmb3JtYW5jZS5kZUB1bnNhZmU=

Jun 28, 2026

TLP:CLEAR

Observed Data

No observed data linked yet.

Indicators of Compromise

View all →
IPv4 Address 20
IPv4 Address 20
2a02:4780:5e:2f1c::1
50% TLP:CLEAR
2a02:4780:5e:654c::1
50% TLP:CLEAR
2a02:4780:5e:f977::1
50% TLP:CLEAR
2a02:4780:5e:3af3::1
50% TLP:CLEAR
139.59.76.102
50% TLP:CLEAR
143.110.245.106
50% TLP:CLEAR
2a02:4780:5e:af69::1
50% TLP:CLEAR
2a02:4780:5e:80b5::1
50% TLP:CLEAR
20.0.138.86
50% TLP:CLEAR
2a02:4780:5e:a902::1
50% TLP:CLEAR
88.80.135.10
50% TLP:CLEAR
187.127.100.173
50% TLP:CLEAR
2a02:4780:5e:9c00::1
50% TLP:CLEAR
2a02:4780:5e:5c25::1
50% TLP:CLEAR
46.248.72.177
50% TLP:CLEAR
2a02:4780:5e:d2e0::1
50% TLP:CLEAR
2a02:4780:5e:3c05::1
50% TLP:CLEAR
2a02:4780:5e:825e::1
50% TLP:CLEAR
2a02:4780:5e:cd8::1
50% TLP:CLEAR
2a02:4780:5e:9ec8::1
50% TLP:CLEAR
Open in full Indicators list →

References

No references recorded yet.

Intel Summary

0

Techniques

0

Tools

7

Campaigns

77

IOCs

0

Observed Data

0

Tactics

Tags

Ransomware

Details

Type
Criminal
Sophistication
Medium
Primary Motivation
Organizational gain
Confidence
80%
First Seen
Dec 21, 2022
Last Seen
Aug 10, 2026
Added
May 4, 2026
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.