rift.cysentrix
← Back to actors

Threat actor

Payload

5 observed events

AIThe actor Payload has been observed in five ransomware incidents impacting the publishing, financial services, and business services sectors in Brazil and Switzerland.

Activity type

Ransomware
5

Verification

Claim
5

Top sectors

Business Services
1
Financial Services
1
Publishing
1

Top countries

BR
1
CH
1

Observed events

Claim High Ransomware

Editora Irmãos Vitale

AIThe Payload ransomware group claims to have breached Brazilian publisher Editora Irmãos Vitale, listing them on their extortion site.

Actor Payload 2 sources
Records Undisclosed
Claim High Ransomware

Preferred Properties

AIPayload has listed Preferred Properties on its extortion site, claiming to have breached the organization.

Actor Payload 2 sources
Records Undisclosed
Claim High Ransomware

ENB Versicherungen | myenb.ch

AIPayload claims to have targeted financial services firm ENB Versicherungen (myenb.ch), as per an unverified extortion-site listing.

Actor Payload 2 sources
Records Undisclosed
Claim High Ransomware

Qualiflex Solutions | qualiflex.solutions

AIPayload ransomware group claims to have breached Qualiflex Solutions, a business services firm, as listed on Ransomware.live.

Actor Payload 2 sources
Records Undisclosed
Claim High Ransomware

SPORTON International Inc.

AIPayload claims to have breached SPORTON International Inc. and listed the organization on its extortion site. The claim is unverified.

Actor Payload 1 source
Records Undisclosed