Suspicious group. We did not manage to confirm any victims.
8
Victims
Aug 20, 2026
First Discovered
Aug 23, 2026
Last Discovered
7
Days Inactive
40%
Infostealer
3/3
Sites Online
Victims (8)
Netim Company
FR
Technology
Discovered: Aug 23, 2026 · Attack est.: Aug 23, 2026
Netim is a French domain name registrar and web hosting provider. Full compromise of internal systems — source code, infrastructure IPs, payment processing databases, customer PII, and internal business data.
Yoma Fleet
MM
Transportation
Discovered: Aug 21, 2026 · Attack est.: Aug 21, 2026
Yoma Fleet is a leading vehicle operating lease, rental, and financing company based in Yangon, Myanmar. The platform provides centralized administration and management for vehicle orders, employee financing, repayments, users,...
The University of Delhi (DU)
IN
Education
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral...
AYUDHYA TH Insurance
TH
Financial Services
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Leaked data from AYUDHYA (TH Insurance / Allianz Thailand). Internal batch-control system used within the financial/transaction batch-processing ecosystem behind the Allianz customer-facing web platform. Includes admin credentials (TBH2CASH:AAbb1234).
GUSTO College GLMS
TH
Education
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com.
Indonesian Police Database
ID
Government & Defense
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Database containing records of 52,000 Indonesian police officers including email addresses, phone numbers, first and last names, passwords, location details, and 4,000 facial photographs.
Job Net .COM.MM
MM
Professional Services
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information, user accounts, and business operations data.
Strategy First International College
MM
Education
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data.