Threat actor
Aurora
9 observed events
AIObserved activity for Aurora consists solely of ransomware (9 incidents), targeting Manufacturing (2), Construction (1), Financial Services (1), and Business Services (1) in DE (2) and NL (1).
Activity type
- Ransomware
- 9
Verification
- Claim
- 9
Top sectors
- Manufacturing
- 2
- Business Services
- 1
- Construction
- 1
- Financial Services
- 1
Top countries
- DE
- 2
- NL
- 1
Observed events
NTP B.V. Civil Engineering Construction
AIThe Aurora ransomware group claims to have listed Dutch construction firm NTP B.V. on its extortion site; the claim is currently unverified.
Kochs GmbH
AIAurora claims to have breached the manufacturing company Kochs GmbH and lists it on its extortion site.
NationsBuilders Insurance Services
AIAurora claims to have data from NationsBuilders Insurance Services, a financial services firm, according to an extortion-site listing on Ransomware.live.
Hagerman & Company
AIAurora claims to have breached Hagerman & Company (Business Services) in an unverified extortion site listing on Ransomware.live.
ALS Global
AIAurora claims to have listed ALS Global on its extortion site (unverified).
Allan Brothers Fruit
AIThe Aurora ransomware group claims to have listed Allan Brothers Fruit on its extortion site, per an unverified RansomLook listing.
Diamond Truck Centres
AIThreat actor Aurora claims to have listed Diamond Truck Centres on its extortion site, per RansomLook, in an unverified claim.
Sumitomo Electric Bordnetze
AIAurora claims to have breached Sumitomo Electric Bordnetze, per an unverified extortion-site listing on RansomLook.