🕸️ Ransomware Detected: ACU - The Automobile Club of Uruguay targeted by Deadlock
ACU - The Automobile Club of Uruguay is targeted by Deadlock.Victim Description: [AI generated] The Automobile Club of Uruguay (ACU) is a nonprofit organization based in Uruguay that provides services to motorists and travelers. It offers roadside assistance, vehicle inspections, travel planning, and tourism-related services. Operating within the automotive services and transportation industry, ACU also promotes road safety and mobility across Uruguay. It maintains affiliations with international automobile club networks, extending member benefits abroad.Victim’s Country: UYDiscovered: 10 Jul 2026, 21:11 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: SKK Networks Sp. z o.o. and UNICARD Systems Sp. z o. o. and SKK SA targeted by Deadlock
SKK Networks Sp. z o.o. and UNICARD Systems Sp. z o. o. and SKK SA is targeted by Deadlock.Victim Description: SKK Networks is a specialized IT infrastructure provider based in Kraków, Poland, that designs, builds, and maintains professional LAN and WLAN networks. They focus on creating high-performance connectivity solutions for challenging environments like high-bay warehouses, cold storage facilities, and industrial plants. Unicard Systems is a Polish manufacturer and integrator of security and building automation systems with over 30 years of experience. Based in Kraków, the company specializes in designing and implementing proprietary hardware and software solutions for business and public infrastructure. SKK Labels , a prominent Polish label manufacturer and printing company based in Kraków. With over 30 years of experience, the company provides comprehensive product marking solutions across various industries, including pharmaceutical, automotive, and logistics.Victim’s Country: PLDiscovered: 10 Jul 2026, 20:57 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: IFC Eur targeted by Deadlock
IFC Eur is targeted by Deadlock.Victim Description: IFC Europa is a Spanish-based distributor specializing in car audio, automotive lighting, and electronics.Victim’s Country: DEDiscovered: 10 Jul 2026, 20:55 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Pinturas Prisa targeted by AiLock
Pinturas Prisa is targeted by AiLock.Victim Description: Pinturas PRISA is a Mexican company from the state of Jalisco with nearly 80 years of history, specializing in the production of high-quality paints and coatings for industrial sectors (automotive, woodworking, manufacturing) and retail customers.Victim’s Country: MXDiscovered: 09 Jul 2026, 16:20 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Automovil Supply S.A targeted by thegentlemen
Automovil Supply S.A is targeted by thegentlemen.Victim Description: ***.com.py zoominfo.com/c/automóvil-supply/405948730 Automovil Supply S.A., accessible via ***.com.py, is a prominent Paraguayan chain of auto parts stores founded on August 10, 1955.With over 70 years of experience in the automotive industry, the company employs between 200 and 500 staff members and operates multiple retail branches across Paraguay.Known for its slogan "Over 70 years moving the country," it serves as a major importer and distributor of motor vehicle parts in the regionVictim’s Country: PYDiscovered: 08 Jul 2026, 02:31 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: tecnocurva.com.br targeted by incransom
tecnocurva.com.br is targeted by incransom.Victim Description: Company operating in the automotive sector. Heavy and agricultural segment. Forming of tubes and welded assemblies.
Tecnocurva manufactures curved, welded, and stamped tubular assemblies, structural and exhaust pipes, and stamped parts with high technical standards and a total focus on performance.Victim’s Country: BRDiscovered: 07 Jul 2026, 08:27 SGT
Known TTPs associated with INC Ransom
T1021.001 Remote Desktop ProtocolT1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1566 Phishing
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: dinisrl.it targeted by cry0
dinisrl.it is targeted by cry0.Victim Description: DINI is a family-run transportation and automotive business base...Victim’s Country: ITDiscovered: 06 Jul 2026, 14:56 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Gold Standard Automotive targeted by Wallstreet
Gold Standard Automotive is targeted by Wallstreet.Victim Description: Gold Standard Automotive Network administers vehicle service contracts sold through dealerships, offering coverage for repairs after your factory warranty ends, with claim approvals handled through the company.Victim’s Country: USDiscovered: 05 Jul 2026, 04:50 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: International Freight Services targeted by thegentlemen
International Freight Services is targeted by thegentlemen.Victim Description: ***.com zoominfo.com/c/ifs-sfocom/348198952 IFS (International Freight Services, Inc.) is a logistics company headquartered at San Francisco International Airport (SFO). It provides international air and ocean freight forwarding, customs brokerage, warehousing, and end-to-end supply chain solutions. With decades of experience, IFS specializes in time-critical and high-touch cargo, serving industries from technology and life sciences to automotive and retailVictim’s Country: USDiscovered: 02 Jul 2026, 06:24 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Meccanica Gn targeted by thegentlemen
Meccanica Gn is targeted by thegentlemen.Victim Description: ***.com zoominfo.com/c/meccanica-gn/368731563 Meccanica GN is an Italian precision manufacturing company based in Carpi, specializing in high-accuracy machining like milling, turning, and grinding.With over two decades of experience, they produce critical components for demanding sectors, including Formula 1 motorsport, aerospace, automotive, and biomedical.The company is recognized for its advanced technology, strict quality assurance, and commitment to maximum performanceVictim’s Country: ITDiscovered: 02 Jul 2026, 06:22 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: hwaseng targeted by dragonforce
hwaseng is targeted by dragonforce.Victim Description: A Taiwanese manufacturer with forty years of experience, specializing in the high-precision production of metal fasteners, precision-machined parts, and components for the electronics and automotive industries.Victim’s Country: TWDiscovered: 29 Jun 2026, 20:56 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Dosab targeted by nova
Dosab is targeted by nova.Victim Description: Demirtaş Organize Sanayi Bölgesi (DOSAB) provides a range of services including waste water treatment, energy supply, and social facilities to support its industrial clients. The region hosts over 573 active companies and employs around 44,000 people, focusing on sectors such as automotive and textile. DOSAB is committed to sustainability and offers various online services and resources for its members. The organization also emphasizes social responsibility through community engagement and educational initiatives - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.Victim’s Country: SADiscovered: 20 Jun 2026, 22:34 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: 5deagosto.com.br targeted by lockbit5
5deagosto.com.br is targeted by lockbit5.Victim Description: 5 de Agosto is a national leader in the distribution of automotive parts, offering integrated soluti...Victim’s Country: BRDiscovered: 20 Jun 2026, 17:32 SGT
Known TTPs associated with LockBit
T1059.003 Windows Command ShellT1110 Brute ForceT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1560.001 Archive via Utility
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: jasperplastics.info targeted by incransom
jasperplastics.info is targeted by incransom.Victim Description: Jasper Plastics Solutions specializes in providing turn-key plastic and polyurethane solutions primarily for OEM manufacturers in the RV, Marine, Automotive, and Construction industries. Their product offerings include polyurethane thermal column blocks, fiberglass components, and innovative design boards that are weather-resistant and customizable. With nearly 20 years of experience, they utilize advanced manufacturing techniques, including a new HD Digital Division for large format printing, to create high-quality parts that mimic natural materials. Jasper Plastics is committed to delivering practical and innovative solutions tailored to the specific needs of their clients.
Employees: 10
Revenue: $5 Million
Industry: Manufacturing
Phone Number: (574) 457-2062Victim’s Country: USDiscovered: 17 Jun 2026, 01:22 SGT
Known TTPs associated with INC Ransom
T1021.001 Remote Desktop ProtocolT1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1566 Phishing
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: SECiL targeted by Deadlock
SECiL is targeted by Deadlock.Victim Description: Seçil Kauçuk is a Turkish manufacturer, founded in 1983, specializing in rubber gaskets, sealing profiles, and industrial molded parts for sectors including construction, automotive, and infrastructure. Operating from a 70,000-square-meter facility in Tarsus, the company exports to over 50 countries and maintains an official R&D center for product testing.Victim’s Country: TRDiscovered: 16 Jun 2026, 02:24 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: anglomoil.com targeted by BrainCipher
anglomoil.com is targeted by BrainCipher.Victim Description: [AI generated] Anglomoil is an Australian company specialising in the manufacture and supply of lubricants and associated products. Operating in the industrial and automotive lubricant sector, it serves mining, transport, agriculture, and general industry markets. Headquartered in Australia, the company produces engine oils, greases, hydraulic fluids, and specialty lubricants, distributing products nationally and to select international markets.Victim’s Country: GBDiscovered: 16 Jun 2026, 01:50 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Mahajak Development targeted by thegentlemen
Mahajak Development is targeted by thegentlemen.Victim Description: ***.com zoominfo.com/c/mahajak-development-co-ltd/346627274 Mahajak Development Co., Ltd. is a leading Thai technology provider established in 1971, headquartered in Bangkok. Evolving from an automotive air-conditioning distributor, they are now a premier supplier of Mitsubishi Heavy Duty climate systems, smart home automation, and professional audio-visual solutions. The company delivers comprehensive consulting, design, and installation services for commercial projects and government facilities across ThailandVictim’s Country: THDiscovered: 15 Jun 2026, 21:02 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: A. Liberty Engineering Co. Ltd targeted by dragonforce
A. Liberty Engineering Co. Ltd is targeted by dragonforce.Victim Description: Founded in 1973 as Liberty Electrical Engineering Company Limited, A. Liberty Engineering Co Ltd has continually evolved to meet the dynamic needs of the electrical services sector. With a rich history in design and contracting, the company has expanded its offerings to include cutting-edge solutions in the realm of sustainable energy.
In response to the burgeoning demand for electric vehicle infrastructure, A. Liberty Engineering proudly introduces its self-branded EV chargers, designed for both AC and DC supercharging. These state-of-the-art systems enhance the efficiency of electric vehicle charging while seamlessly integrating with existing Intelligent EV Charging and IoT LV Switchboard Monitoring systems.Victim’s Country: HKDiscovered: 12 Jun 2026, 20:23 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Did Asia targeted by direwolf
Did Asia is targeted by direwolf.Victim Description: Automotive PartsVictim’s Country: THDiscovered: 12 Jun 2026, 09:22 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Lösing Filtertechnik targeted by spacebears
Lösing Filtertechnik is targeted by spacebears.Victim Description: Lösing Filtertechnik (Willibrord Lösing Filtertechnik e.K.) is a leading German specialist in filtration technology with more than 70 years of experience since its founding in 1955.The company offers a wide range of high-quality filters, including oil, air, fuel, hydraulic, and water filtration solutions, along with custom-tailored products for various industries such as automotive, commercial vehicles, construction machinery, rail transport, and more.Known for its expertise with brands like SEPAR and a strong focus on innovation, Lösing develops individual solutions precisely matched to customer requirements while maintaining top quality and reliable service.Headquartered in Hattingen, Germany, the company serves both B2B clients and private customers through its online shop, emphasizing perfect filtration for every challenge. https://***.de/Victim’s Country: DEDiscovered: 10 Jun 2026, 09:57 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: IP Rings targeted by thegentlemen
IP Rings is targeted by thegentlemen.Victim Description: ***.com zoominfo.com/c/ip-rings-ltd/62719470 IP Rings Ltd is an India-based automotive component manufacturer and a member of the Amalgamations Group, founded in 1991. The company specializes in producing piston rings, high-precision forgings, and crank pins using advanced orbital cold forming technology. It is a publicly traded corporation with over 500 employees, serving global clients with cutting-edge surface treatments and high-quality partsVictim’s Country: IEDiscovered: 08 Jun 2026, 17:58 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Integrated Distribution targeted by thegentlemen
Integrated Distribution is targeted by thegentlemen.Victim Description: ***.com zoominfo.com/c/integrated-distribution-inc/348479499 ntegrated Distribution Inc. is a prominent industrial distributor based in Comstock Park, Michigan, serving local manufacturers since 1998. The company specializes in fast-response sourcing, technical support, and the supply of critical components such as bearings, belts, motors, and power transmission parts. With a strong focus on minimizing equipment downtime, IDI provides tailored industrial solutions for diverse sectors, including automotive, food processing, and packagingVictim’s Country: GBDiscovered: 08 Jun 2026, 17:57 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Anandji Haridas targeted by thegentlemen
Anandji Haridas is targeted by thegentlemen.Victim Description: ***.com ***.com/c/anandji-haridas--co-ltd/354316069 Anandji Haridas & Co. (AHCPL) is a pioneering Indian manufacturer with over seven decades of expertise in cold forming, tool design, and advanced sheet metal ***.As a fully certified OEM supplier, they specialize in producing high-precision, cost-effective critical automotive components and spun pulleys through integrated in-house ***.With a steadfast commitment to world-class quality, AHCPL remains a trusted partner for innovative and reliable sheet metal forming solutionsVictim’s Country: INDiscovered: 04 Jun 2026, 17:10 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Brian Jessel BMW targeted by thegentlemen
Brian Jessel BMW is targeted by thegentlemen.Victim Description: ***.com ***.com/c/brian-jessel-bmw/347467232 Established in 1986, Brian Jessel BMW is one of Canada's premier luxury automotive dealerships, proudly located in Vancouver, British Columbia. Recognized as a top-tier retailer for both new and pre-owned vehicles, the company offers an extensive selection of BMW models alongside expert financing and comprehensive service solutions. With a dedicated team of over 200 professionals, they have built a decades-long legacy of delivering exceptional customer experiences and automotive excellenceVictim’s Country: USDiscovered: 04 Jun 2026, 17:10 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: National Industries targeted by thegentlemen
National Industries is targeted by thegentlemen.Victim Description: ***.in ***.com/c/national-industries/453107978 Established in 1976 in Ludhiana, National Industries is a premier automotive manufacturing enterprise and a core part of the esteemed Metalman Group. Specializing in precision-engineered components, the company supplies high-quality parts to top-tier two-wheeler brands, combining decades of expertise with modern manufacturing excellence. With a strong foundation in engineering innovation and award-winning workplace practices, National Industries continues to drive reliability and technological advancement in the automotive sectorVictim’s Country: INDiscovered: 04 Jun 2026, 17:09 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.