Hunt / emperador
emperador
60victims, 90d
Oct 31last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how emperador gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-10-31 | Punta Shopping | UY |
| 2026-10-31 | Holcim | CH |
| 2026-10-30 | Studio Stelitano e Associati | IT |
| 2026-10-29 | LA PROFUMERIA SRL | IT |
| 2026-10-29 | MAA Group Consulting Engineers | ?? |
| 2026-10-27 | TWICE SRL | ?? |
| 2026-10-26 | Afflelou | FR |
| 2026-10-26 | TRANSPORTES JIMENEZ and REYES JIM REY S.A. | MX |
| 2026-10-25 | A-RMS | ?? |
| 2026-10-25 | AyT COMPUTERS SRL | ?? |
| 2026-10-25 | AB InBev | BE |
| 2026-10-24 | Phoenix S&S GmbH | DE |
Latest 12 of 60, from ransomware.live. These are the group's claims.
Sweep
No indicators. Either nobody has published any for emperador, or the reports cite values without marking them as IOCs. package.json