Hunt / umbra
UmBra
10victims, 90d
Oct 10last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how UmBra gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-10-10 | Helwan University (HITU) | EG |
| 2026-10-08 | SOCOCO | BR |
| 2026-10-08 | Manipal Academy of Higher Edu | IN |
| 2026-10-08 | IIT Roorkee | IN |
| 2026-10-08 | FSE, Cairo University | EG |
| 2026-10-07 | SANAtech Global Solutions | ?? |
| 2026-10-07 | Raqib | ?? |
| 2026-10-07 | Tharisa | ZA |
| 2026-10-06 | Beni Suef Technological University – BTU | EG |
| 2026-10-06 | Four Hands LLC | US |
Latest 10 of 10, from ransomware.live. These are the group's claims.
Sweep
No indicators. Either nobody has published any for UmBra, or the reports cite values without marking them as IOCs. package.json