{
  "slug": "aurora",
  "group": "aurora",
  "name": "Aurora",
  "note": null,
  "attck": [],
  "activity": {
    "postings": 29,
    "first": "2026-08-11",
    "last": "2026-10-30",
    "countries": {
      "??": 3,
      "GB": 3,
      "DE": 4,
      "IT": 2,
      "CH": 1,
      "US": 12,
      "ES": 1,
      "DK": 1,
      "AR": 1,
      "AT": 1
    },
    "sectors": {
      "manufacturing": 9,
      "unknown": 3,
      "services": 6,
      "insurance": 2,
      "agriculture": 1,
      "transportation": 3,
      "consumer": 4,
      "technology": 2,
      "healthcare": 1
    },
    "recent": [
      {
        "date": "2026-10-30",
        "name": "Rapid Manufacturing",
        "country": "??",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/UmFwaWQgTWFudWZhY3R1cmluZ0BhdXJvcmE"
      },
      {
        "date": "2026-10-28",
        "name": "EWM Group",
        "country": "GB",
        "sectors": [
          "unknown"
        ],
        "url": "https://www.ransomware.live/id/RVdNIEdyb3VwQGF1cm9yYQ"
      },
      {
        "date": "2026-10-28",
        "name": "Meleghy Automotive & Cie. GmbH",
        "country": "DE",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/TWVsZWdoeSBBdXRvbW90aXZlICYgQ2llLiBHbWJIQGF1cm9yYQ"
      },
      {
        "date": "2026-10-27",
        "name": "GreenbergFarrow",
        "country": "??",
        "sectors": [
          "services",
          "insurance"
        ],
        "url": "https://www.ransomware.live/id/R3JlZW5iZXJnRmFycm93QGF1cm9yYQ"
      },
      {
        "date": "2026-10-26",
        "name": "Ernesto Malvestiti S.p.A.",
        "country": "IT",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/RXJuZXN0byBNYWx2ZXN0aXRpIFMucC5BLkBhdXJvcmE"
      },
      {
        "date": "2026-10-23",
        "name": "ARX Group SA",
        "country": "CH",
        "sectors": [
          "unknown"
        ],
        "url": "https://www.ransomware.live/id/QVJYIEdyb3VwIFNBQGF1cm9yYQ"
      },
      {
        "date": "2026-10-21",
        "name": "Allmand-Smith Limited",
        "country": "GB",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/QWxsbWFuZC1TbWl0aCBMaW1pdGVkQGF1cm9yYQ"
      },
      {
        "date": "2026-10-20",
        "name": "Duarte Nursery, Inc.",
        "country": "US",
        "sectors": [
          "agriculture"
        ],
        "url": "https://www.ransomware.live/id/RHVhcnRlIE51cnNlcnksIEluYy5AYXVyb3Jh"
      },
      {
        "date": "2026-10-19",
        "name": "POWERsonic Industries Inc.",
        "country": "US",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/UE9XRVJzb25pYyBJbmR1c3RyaWVzIEluYy5AYXVyb3Jh"
      },
      {
        "date": "2026-10-16",
        "name": "Adams Warehouse & Delivery, Inc.",
        "country": "US",
        "sectors": [
          "transportation"
        ],
        "url": "https://www.ransomware.live/id/QWRhbXMgV2FyZWhvdXNlICYgRGVsaXZlcnksIEluYy5AYXVyb3Jh"
      },
      {
        "date": "2026-10-14",
        "name": "Estrategias BigMat S.L.U.",
        "country": "ES",
        "sectors": [
          "consumer"
        ],
        "url": "https://www.ransomware.live/id/RXN0cmF0ZWdpYXMgQmlnTWF0IFMuTC5VLkBhdXJvcmE"
      },
      {
        "date": "2026-10-13",
        "name": "The Buckner Company, Inc.",
        "country": "US",
        "sectors": [
          "unknown",
          "insurance"
        ],
        "url": "https://www.ransomware.live/id/VGhlIEJ1Y2tuZXIgQ29tcGFueSwgSW5jLkBhdXJvcmE"
      }
    ]
  },
  "convergences": [],
  "reports": [
    {
      "url": "https://www.sophos.com/en-us/blog/ai-used-in-aur0ra-ransomware-testing-and-execution",
      "publisher": "Sophos X-Ops",
      "published": "2026-10-29",
      "title": "AI used in Aur0ra ransomware testing and execution",
      "origin": "feed",
      "primary": false
    }
  ],
  "techniques": [],
  "cves": [],
  "indicators": {
    "list": [],
    "withheld": 0
  },
  "rules": [],
  "coverage": {
    "techniques": 0,
    "defendable": 0,
    "covered": 0,
    "uncovered": []
  }
}