Hunt / aurora
Aurora
29victims, 90d
Oct 30last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how Aurora gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-10-30 | Rapid Manufacturing | ?? |
| 2026-10-28 | EWM Group | GB |
| 2026-10-28 | Meleghy Automotive & Cie. GmbH | DE |
| 2026-10-27 | GreenbergFarrow | ?? |
| 2026-10-26 | Ernesto Malvestiti S.p.A. | IT |
| 2026-10-23 | ARX Group SA | CH |
| 2026-10-21 | Allmand-Smith Limited | GB |
| 2026-10-20 | Duarte Nursery, Inc. | US |
| 2026-10-19 | POWERsonic Industries Inc. | US |
| 2026-10-16 | Adams Warehouse & Delivery, Inc. | US |
| 2026-10-14 | Estrategias BigMat S.L.U. | ES |
| 2026-10-13 | The Buckner Company, Inc. | US |
Latest 12 of 29, from ransomware.live. These are the group's claims.
Sweep
No indicators. Either nobody has published any for Aurora, or the reports cite values without marking them as IOCs. package.json