🕸️ Ransomware Detected: SASI JSC targeted by thegentlemen
SASI JSC is targeted by thegentlemen.Victim Description: sasi.vn - SASI (Saigon Auto Supporting Industry JSC) is a Vietnamese industrial manufacturing company operating via the domain sasi.vn, focused on large-scale OEM production.SASI is a long-established manufacturer, founded in the 1970s, with production facilities located in Ho Chi Minh City (Cu Chi Industrial Park), which is an important industrial zone for heavy and precision manufacturing in Vietnam.The company’s core activity is OEM and supporting industry manufacturing, meaning it produces metal parts, components, and assemblies strictly according to customer specifications rather than selling consumer products under its own brand.SASI plays a critical role in automotive and industrial supply chains, supplying components used in vehicles, motorcycles, industrial machinery, and selected medical and technical equipment.Victim’s Country: VNDiscovered: 21 Jan 2026, 04:42 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Rola Motor Group targeted by thegentlemen
Rola Motor Group is targeted by thegentlemen.Victim Description: www.rola.co.za https://www.zoominfo.com/c/rola-motor-group/479741917 Rola Motor Group specializes in the sale of new, demo, and quality pre-owned vehicles, offering a seamless online finance pre-approval process. They provide services for buying and selling cars, as well as vehicle servicing across various brands. Their intended clients include individuals looking to purchase vehicles, sell their cars, or seek financing solutions. Established in 1963, Rola Motor Group is known for its exceptional customer service and a wide range of automotive solutions.Victim’s Country: ZADiscovered: 21 Jan 2026, 03:06 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: PAO HWA TRADING LTD targeted by thegentlemen
PAO HWA TRADING LTD is targeted by thegentlemen.Victim Description: https://www.paohwa.com/ PAO HWA TRADING CO., LTD is a leading Taiwanese importer and distributor of comprehensive cutting tools for industries including automotive, aerospace, electronics, and mold manufacturing. The company serves as a general agent for brands such as Japan's KYOCERA and a distributor for NACHI.Victim’s Country: TWDiscovered: 20 Jan 2026, 05:10 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: WANCHI STEEL INDUSTRIAL targeted by everest
WANCHI STEEL INDUSTRIAL is targeted by everest.Victim Description: [AI generated] WANCHI STEEL INDUSTRIAL Co. Ltd. is a multinational company that specializes in steel manufacturing and distribution. The company has advanced production technology and equipment. They manufacture a variety of products including cold-rolled, hot-rolled, galvanized, and pre-painted galvanized steel. Their products are used widely in construction, automotive, appliance, and other industries. WANCHI STEEL INDUSTRIAL is known for its quality and commitment to innovation and sustainability.Victim’s Country: TWDiscovered: 20 Jan 2026, 01:55 SGT
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Durashiloh targeted by nitrogen
Durashiloh is targeted by nitrogen.Victim Description: The company specializes in the development, engineering, and manufacturing of various components and systems for the automotive industry and other sectors.Victim’s Country: USDiscovered: 20 Jan 2026, 00:29 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Galutti Automotive Industria Metalurgica Ltda targeted by sinobi
Galutti Automotive Industria Metalurgica Ltda is targeted by sinobi.Victim Description: Galutti Automotive, established in 1988, specializes in the production of wire artifacts such as support rods, comfort screens, springs, tubes, welding, and stamping. With over 35 years in the market, it has become a leading manufacturer in South America, producing automotive components for both two and four-wheeled vehicles, as well as products for white and yellow line machinery. The company focuses on quality and sustainability, holding ISO 14001:2015 certification to ensure environmentally friendly practices. Galutti serves diverse sectors by offering a wide range of automotive parts including seat covers, headrests, and various metallic and spring components.Victim’s Country: BRDiscovered: 19 Jan 2026, 05:06 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: https://comercialautomotriz.com targeted by tengu
https://comercialautomotriz.com is targeted by tengu.Victim Description: Comercial Automotriz de los Altos S.A. de C.V. is a Mexican small/medium-sized company operating in the automotive and tire sector. It specializes in: The sale of tires and auto parts Mechanical services and maintenance Retail sales and spare parts for vehicles It operates in several states, including Jalisco, Michoacán, and Aguascalientes, within the Los Altos region of Mexico.Victim’s Country: ECDiscovered: 17 Jan 2026, 04:01 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: ecsc.org targeted by incransom
ecsc.org is targeted by incransom.Victim Description: Website
www.ecsc.org
Revenue
$11.2 million
Industry
Electricity, oil and gas
Energy, utilities and waste
Organizational structure
Similar companies
Company analytics
About South Carolina Electric Cooperatives
Electric Cooperatives of South Carolina, Inc. is a statewide service and trade association representing electric cooperatives throughout the state. It serves 18 consumer-owned electric cooperatives, one wholesale electric cooperative, one transmission cooperative, and one materials cooperative. The association's mission is focused on providing electricity to nearly 2 million South Carolinians through an extensive network of power lines, as well as providing energy efficiency programs and clean energy initiatives. The association advocates for the electrification of rural
areas and provides various resources, including educational programs and assistance in purchasing electric vehicles.Victim’s Country: USDiscovered: 17 Jan 2026, 01:35 SGT
Known TTPs associated with INC Ransom
T1021.001 Remote Desktop ProtocolT1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1566 Phishing
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Industrial Rivet & Fastener Company targeted by akira
Industrial Rivet & Fastener Company is targeted by akira.Victim Description: Industrial Rivet & Fastener Company specializes in a vast range o
f high-quality rivets and riveting tools, serving distributors an
d end users in various industries, including automotive.
We will upload 36gb of corporate data soon. Employee personal inf
ormation (SSNs, passports, IDs and so on), HR files, client infor
mation, detailed financials, NDAs, etc.Victim’s Country: USDiscovered: 16 Jan 2026, 20:17 SGT
Known TTPs associated with Akira
T1021.001 Remote Desktop ProtocolT1027.001 Binary PaddingT1036.005 Match Legitimate Resource Name or LocationT1059.001 PowerShellT1560.001 Archive via Utility
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Sanko Gosei Technology targeted by payoutsking
Sanko Gosei Technology is targeted by payoutsking.Victim Description: [AI generated] Sanko Gosei Technology is a Japanese company specializing in development, design, and manufacturing of plastic components. They serve various sectors, including automotive, electrical, & consumer products. Their expertise includes Injection moulding, design assistance, & tool production. Meanwhile, it has international operations, with facilities in Europe, Asia, & America.Victim’s Country: GBDiscovered: 15 Jan 2026, 05:38 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Bär Cargolift targeted by payoutsking
Bär Cargolift is targeted by payoutsking.Victim Description: [AI generated] Bär Cargolift is a leading European manufacturer of hydraulic tail lifts, often utilized in trucks and commercial vehicles. Founded in 1981 in Heilbronn, Germany, it provides a wide range of products, from standard liftgates to retractable lifts, designed for different vehicle types and load capacities. Bär Cargolift is recognized for its innovation, quality, and safety in producing transport solutions. They also offer value-added services like training, repair, and maintenance.Victim’s Country: DEDiscovered: 15 Jan 2026, 05:37 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Pilot automotive targeted by sinobi
Pilot automotive is targeted by sinobi.Victim Description: Pilot specializes in a wide range of automotive accessories, including truck, interior, and exterior accessories as well as lighting and replacement parts. They offer products such as step bars, grille covers, and various car care items aimed at enhancing vehicle functionality and aesthetics. Targeting both personal vehicle owners and automotive enthusiasts, their products cater to any driver looking to customize and improve their car or truck. With a commitment to quality, Pilot features well-known brands like Bully Truck Accessories and Voodoo Ride.Victim’s Country: USDiscovered: 13 Jan 2026, 08:20 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: ITG Electronics targeted by sinobi
ITG Electronics is targeted by sinobi.Victim Description: ITG Electronics, Inc. specializes in a vast range of electronic components including power inductors, EMI filters, common mode chokes, and transformers, catering to high-performance applications in various industries. Their products are designed for automotive, industrial, consumer, and medical sectors, offering both standard and custom solutions. With a strong commitment to energy efficiency and compliance with industry standards, ITG provides tailored solutions for power supplies and electronic systems. Their expert sales team is accessible for inquiries and customized product requirements, ensuring specific needs are met efficiently.Victim’s Country: USDiscovered: 12 Jan 2026, 03:51 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Nissan Motor Corporation targeted by everest
Nissan Motor Corporation is targeted by everest.Victim Description: [AI generated] Nissan Motor Corporation is a multinational automobile manufacturer headquartered in Yokohama, Japan. The company, founded in 1933, produces a comprehensive range of vehicles, from luxury cars to commercial trucks. Nissan is known for its innovation in electric and autonomous driving technology. It includes brands like Infiniti and Datsun. It also has partnerships with Renault and Mitsubishi.Victim’s Country: JPDiscovered: 11 Jan 2026, 02:20 SGT
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Luxshare Precision Industry Co. Ltd. targeted by ransomhouse
Luxshare Precision Industry Co. Ltd. is targeted by ransomhouse.Victim Description: Luxshare Precision Industry Co., Ltd. (Luxshare-ICT) is a leading global manufacturer of precision components, cable assemblies, connectors, and integrated interconnect solutions, primarily serving the electronics industry. The company's core business segments include consumer electronics (accounting for approximately 79% of revenue), communications and data centers (high-speed interconnects for AI infrastructure), and automotive electronics (wiring harnesses and intelligent systems). Key clients feature Apple as the primary partner (contributing over 70% of revenue through supplies for iPhones, AirPods, Apple Watch, and Vision Pro), alongside NVIDIA, Meta, Qualcomm, and major automakers.Headquartered in Dongguan, China, Luxshare employs over 278,000 people worldwide and operates production facilities across China, Vietnam, India, and Europe.Victim’s Country: CNDiscovered: 08 Jan 2026, 22:27 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Wamtechnik targeted by thegentlemen
Wamtechnik is targeted by thegentlemen.Victim Description: www.wamtechnik.pl https://www.zoominfo.com/c/wamtechnik-ltd/398138337 Wamtechnik specializes in the production and distribution of batteries and accumulator packs, focusing on lithium-ion technology and other battery types for industrial applications. The company offers tailored battery solutions and professional consulting services for various sectors, including automotive, medical, and industrial electronics. With over 30 years of experience, Wamtechnik has established itself as a leading manufacturer in the battery systems industry, collaborating with global leaders like Panasonic and LG Chem. Their commitment to quality and safety ensures reliable power solutions for a wide range of devices.Victim’s Country: PLDiscovered: 07 Jan 2026, 20:03 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: M&M Auto Parts targeted by sinobi
M&M Auto Parts is targeted by sinobi.Victim Description: M&M Auto Parts, Inc. specializes in providing high-quality auto parts, including over 150,000 parts in stock and ready for delivery. They cater to customers looking for affordable replacement parts, offering savings of up to 70% over new parts. The company also features a wide range of aftermarket and remanufactured products, ensuring a comprehensive selection for various automotive needs. Their intended clients include both individual consumers and businesses seeking reliable and cost-effective auto parts solutions.Victim’s Country: USDiscovered: 05 Jan 2026, 15:37 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Lares targeted by sinobi
Lares is targeted by sinobi.Victim Description: Lares Corporation specializes in performance equipment and aftermarket parts for vehicles, aimed at automotive enthusiasts and everyday drivers. They offer a wide range of universal fit components including pumps, pulleys, U-joints, and filters. The company provides various resources such as tech tips, articles, and a catalog for customers to enhance their automotive experience. Lares Corporation aims to empower clients in both performance tuning and regular vehicle maintenance.Victim’s Country: USDiscovered: 05 Jan 2026, 15:36 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Chrysler - Database leaked targeted by everest
Chrysler - Database leaked is targeted by everest.Victim Description: [AI generated] Chrysler is a prominent American automobile manufacturer, known for several famous brands like Jeep and Dodge. In the past, it suffered a database leak incident, where confidential information related to customers, employees, or other important company data might have been exposed, leading to potential security and privacy issues. This often results from hacking, inadequate security measures, or other forms of data breach.Victim’s Country: USDiscovered: 04 Jan 2026, 21:51 SGT