Hunt / pear
Pear
27victims, 90d
Nov 5last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how Pear gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-11-05 | Bridgestone HosePower, LLC | US |
| 2026-11-04 | gWorks | US |
| 2026-11-04 | Palm Vascular Centers | US |
| 2026-11-02 | Neiman & Company, Inc. | US |
| 2026-10-28 | Cyrious Software | US |
| 2026-10-23 | Fresh Farms | US |
| 2026-10-21 | Adobe Insurance Brokers, LLC | US |
| 2026-10-16 | Macfarlan Capital Partners | US |
| 2026-10-16 | Solar Communications International | US |
| 2026-10-16 | Caretaker Landscape and Tree Management | US |
| 2026-09-30 | Software Answers, a Banyan Software Company | US |
| 2026-09-28 | Kellys Home Center | US |
Latest 12 of 27, from ransomware.live. These are the group's claims.
Confirmed elsewhere
Victims of Pear that a second, independent source also named inside two weeks. How convergence works.
- 2026-09-10 Next Level Medical, LLC leak + notice
- 2026-09-04 Mogren, Glessner & Ahrens, P.S. leak + notice
Sweep
No indicators. Either nobody has published any for Pear, or the reports cite values without marking them as IOCs. package.json