{
  "slug": "settra",
  "group": "settra",
  "name": "Settra",
  "note": null,
  "attck": [],
  "activity": {
    "postings": 75,
    "first": "2026-08-11",
    "last": "2026-11-06",
    "countries": {
      "US": 35,
      "GB": 6,
      "JM": 1,
      "EE": 1,
      "??": 8,
      "NO": 2,
      "LA": 1,
      "DE": 5,
      "AT": 1,
      "AU": 2,
      "BR": 2,
      "MS": 1,
      "MX": 1,
      "IT": 1,
      "NL": 2,
      "CA": 1,
      "SE": 1,
      "JP": 1,
      "GR": 1,
      "MY": 1,
      "EC": 1
    },
    "sectors": {
      "government": 1,
      "consumer": 11,
      "manufacturing": 10,
      "insurance": 3,
      "unknown": 13,
      "finance": 4,
      "services": 12,
      "healthcare": 4,
      "transportation": 6,
      "technology": 11,
      "agriculture": 2,
      "energy": 1
    },
    "recent": [
      {
        "date": "2026-11-06",
        "name": "ar500armor.com",
        "country": "US",
        "sectors": [
          "government"
        ],
        "url": "https://www.ransomware.live/id/YXI1MDBhcm1vci5jb21Ac2V0dHJh"
      },
      {
        "date": "2026-11-06",
        "name": "lakelawnresort.com",
        "country": "US",
        "sectors": [
          "consumer"
        ],
        "url": "https://www.ransomware.live/id/bGFrZWxhd25yZXNvcnQuY29tQHNldHRyYQ"
      },
      {
        "date": "2026-11-06",
        "name": "metalloidcorp.com",
        "country": "US",
        "sectors": [
          "manufacturing",
          "insurance"
        ],
        "url": "https://www.ransomware.live/id/bWV0YWxsb2lkY29ycC5jb21Ac2V0dHJh"
      },
      {
        "date": "2026-11-03",
        "name": "marlo-inc.com",
        "country": "US",
        "sectors": [
          "unknown"
        ],
        "url": "https://www.ransomware.live/id/bWFybG8taW5jLmNvbUBzZXR0cmE"
      },
      {
        "date": "2026-11-02",
        "name": "kingdomtitle.net",
        "country": "GB",
        "sectors": [
          "finance"
        ],
        "url": "https://www.ransomware.live/id/a2luZ2RvbXRpdGxlLm5ldEBzZXR0cmE"
      },
      {
        "date": "2026-11-02",
        "name": "mackinengineering.com",
        "country": "US",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/bWFja2luZW5naW5lZXJpbmcuY29tQHNldHRyYQ"
      },
      {
        "date": "2026-11-02",
        "name": "insurancehouse.com",
        "country": "GB",
        "sectors": [
          "finance",
          "insurance"
        ],
        "url": "https://www.ransomware.live/id/aW5zdXJhbmNlaG91c2UuY29tQHNldHRyYQ"
      },
      {
        "date": "2026-10-31",
        "name": "atljamaica.com",
        "country": "JM",
        "sectors": [
          "unknown"
        ],
        "url": "https://www.ransomware.live/id/YXRsamFtYWljYS5jb21Ac2V0dHJh"
      },
      {
        "date": "2026-10-31",
        "name": "flynn-construction.com",
        "country": "US",
        "sectors": [
          "manufacturing",
          "insurance"
        ],
        "url": "https://www.ransomware.live/id/Zmx5bm4tY29uc3RydWN0aW9uLmNvbUBzZXR0cmE"
      },
      {
        "date": "2026-10-31",
        "name": "smithandcasady.com",
        "country": "US",
        "sectors": [
          "services"
        ],
        "url": "https://www.ransomware.live/id/c21pdGhhbmRjYXNhZHkuY29tQHNldHRyYQ"
      },
      {
        "date": "2026-10-31",
        "name": "nelsenarchitects.com",
        "country": "US",
        "sectors": [
          "services"
        ],
        "url": "https://www.ransomware.live/id/bmVsc2VuYXJjaGl0ZWN0cy5jb21Ac2V0dHJh"
      },
      {
        "date": "2026-10-18",
        "name": "www.marvinpac.com",
        "country": "US",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/d3d3Lm1hcnZpbnBhYy5jb21Ac2V0dHJh"
      }
    ]
  },
  "convergences": [],
  "reports": [
    {
      "url": "https://www.recordedfuture.com/blog/october-2026-cve-landscape",
      "publisher": "Recorded Future Insikt",
      "published": "2026-11-06",
      "title": "October 2026 CVE Landscape",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/",
      "publisher": "Unit 42",
      "published": "2026-10-20",
      "title": "Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://asec.ahnlab.com/en/95764/",
      "publisher": "AhnLab ASEC",
      "published": "2026-10-11",
      "title": "September 2026 Dark Web Breach Incident Trend Report",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://www.intel471.com/blog/2026-sans-threat-hunting-survey-adversaries-prizing-stealth-over-speed-defenders-cooling-on-ai",
      "publisher": "Intel 471",
      "published": "2026-09-24",
      "title": "2026 SANS Threat Hunting Survey: Adversaries Prizing Stealth over Speed? Defenders Cooling on AI?",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://www.huntress.com/blog/new-settra-ransomware-variant",
      "publisher": "Huntress",
      "published": "2026-09-17",
      "title": "Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM",
      "origin": "feed",
      "primary": true
    }
  ],
  "techniques": [],
  "cves": [],
  "indicators": {
    "list": [
      {
        "type": "ipv4",
        "value": "193.5.65.114",
        "source": "https://www.huntress.com/blog/new-settra-ransomware-variant"
      },
      {
        "type": "ipv4",
        "value": "45.13.122.7",
        "source": "https://www.huntress.com/blog/new-settra-ransomware-variant"
      }
    ],
    "withheld": 0
  },
  "rules": [],
  "coverage": {
    "techniques": 0,
    "defendable": 0,
    "covered": 0,
    "uncovered": []
  }
}