Hunt / byod
BYOD
17victims, 90d
Nov 5last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how BYOD gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-11-05 | First and Final Warning - IHG Hotels & Resorts (Estate) | ?? |
| 2026-11-04 | IHG Hotels & Resorts (Estate) | GB |
| 2026-11-02 | Michigan State University | US |
| 2026-10-27 | UPDATE: UNM | ?? |
| 2026-10-26 | University of New Mexico | US |
| 2026-10-17 | Decorolala - 500 Line Sample | ?? |
| 2026-10-13 | Decorolala | ?? |
| 2026-10-08 | Some semi-samples Of Liberty X TMO cause we got yappatrons on twitter | ?? |
| 2026-10-07 | TMobile | US |
| 2026-10-07 | Gate | Crypto Exchange | SG |
| 2026-10-05 | Standpointe / Trinite Solutions | ?? |
| 2026-10-05 | Franklin Empire | ?? |
Latest 12 of 17, from ransomware.live. These are the group's claims.
Sweep
No indicators. Either nobody has published any for BYOD, or the reports cite values without marking them as IOCs. package.json