Ransomware gang activity surge reported mid-September

Between 14 and 16 September 2026, multiple ransomware groups posted victim claims on their leak sites, including genesis (Dorfman Abrams Music and Bernath & Rosenberg), ShadowByt3$ (HandyTrac), anubis (Better Accounting Solutions), ransomhouse (Namibian Defence Force), kairos and qilin, and blacknevas (Mefa Group and subsidiaries). The posts were aggregated and shared across infosec monitoring channels.

18 reportsother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

🚨New ransom group blog posts!🚨 Group name: genesis Post title: Dorfman Abrams Music, P.C Info: https:// cti.fyi/groups/genesis.html Group name: genesis Post title: Bernath & Rosenberg Info: https://

mastodon:infosec-exchangeother15d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: genesis Post title: Dorfman Abrams Music, P.C Info: https:// cti.fyi/groups/genesis.html Group name: genesis Post title: Bernath & Rosenberg Info: https:// cti.fyi/groups/genesis.html # ransomware # cti # threatintelligence # cybersecurity # infosec

🚨New ransom group blog posts!🚨 Group name: qilin Post title: Bravo Group Info: https:// cti.fyi/groups/qilin.html Group name: qilin Post title: Incrys Info: https:// cti.fyi/groups/qilin.html # rans

mastodon:infosec-exchangeother14d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: qilin Post title: Bravo Group Info: https:// cti.fyi/groups/qilin.html Group name: qilin Post title: Incrys Info: https:// cti.fyi/groups/qilin.html # ransomware # cti # threatintelligence # cybersecurity # infosec

🚨New ransom group blog posts!🚨 Group name: akira Post title: Stransky Heiz-Mess-Regeltechnik GmbH Info: https:// cti.fyi/groups/akira.html Group name: akira Post title: Brentwood Country Club Info:

mastodon:infosec-exchangeother14d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: akira Post title: Stransky Heiz-Mess-Regeltechnik GmbH Info: https:// cti.fyi/groups/akira.html Group name: akira Post title: Brentwood Country Club Info: https:// cti.fyi/groups/akira.html Group name: akira Post title: Congressional Iron Works Info: https:// cti.fyi/groups/akira.html Group name: akira Post title: Kyodo USA Info: https:// cti.fyi/groups

🚨New ransom group blog posts!🚨 Group name: qilin Post title: Taurus Ibérica Info: https:// cti.fyi/groups/qilin.html Group name: BrainCipher Post title: Admin_Share.rar Info: https:// cti.fyi/groups

mastodon:infosec-exchangeother14d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: qilin Post title: Taurus Ibérica Info: https:// cti.fyi/groups/qilin.html Group name: BrainCipher Post title: Admin_Share.rar Info: https:// cti.fyi/groups/BrainCipher.html Group name: BrainCipher Post title: HR_share.rar Info: https:// cti.fyi/groups/BrainCipher.html Group name: BrainCipher Post title: Managers_Share.part01.rar Info: https:// cti.fyi/g

🚨New ransom group blog post!🚨 Group name: ransomhouse Post title: [DISCLOSED] California School Employees Association Info: https:// cti.fyi/groups/ransomhouse.html # ransomware # cti # threatintell

mastodon:infosec-exchangeother14d ago kagi ↗

🚨New ransom group blog post!🚨 Group name: ransomhouse Post title: [DISCLOSED] California School Employees Association Info: https:// cti.fyi/groups/ransomhouse.html # ransomware # cti # threatintelligence # cybersecurity # infosec

🚨New ransom group blog posts!🚨 Group name: interlock Post title: Springfield Public Schools Info: https:// cti.fyi/groups/interlock.html Group name: insomnia Post title: Wiggins, Childs, Pantazis, F

mastodon:infosec-exchangeother14d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: interlock Post title: Springfield Public Schools Info: https:// cti.fyi/groups/interlock.html Group name: insomnia Post title: Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC Info: https:// cti.fyi/groups/insomnia.html # ransomware # cti # threatintelligence # cybersecurity # infosec

🚨New ransom group blog posts!🚨 Group name: safepay Post title: gob.pe Info: https:// cti.fyi/groups/safepay.html Group name: safepay Post title: ara-lyss.ch Info: https:// cti.fyi/groups/safepay.htm

mastodon:infosec-exchangeother14d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: safepay Post title: gob.pe Info: https:// cti.fyi/groups/safepay.html Group name: safepay Post title: ara-lyss.ch Info: https:// cti.fyi/groups/safepay.html Group name: safepay Post title: ryomo.co.jp Info: https:// cti.fyi/groups/safepay.html Group name: safepay Post title: stoecklin-kuechen.ch Info: https:// cti.fyi/groups/safepay.html Group name: saf

🚨New ransom group blog posts!🚨 Group name: qilin Post title: Thema Foundries Info: https:// cti.fyi/groups/qilin.html Group name: qilin Post title: Thorndale Foundation Info: https:// cti.fyi/groups

mastodon:infosec-exchangeother13d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: qilin Post title: Thema Foundries Info: https:// cti.fyi/groups/qilin.html Group name: qilin Post title: Thorndale Foundation Info: https:// cti.fyi/groups/qilin.html # ransomware # cti # threatintelligence # cybersecurity # infosec

🚨New ransom group blog posts!🚨 Group name: kairos Post title: Leisure Coast Kitchens Info: https:// cti.fyi/groups/kairos.html Group name: qilin Post title: In The Company of Huskies Info: https://

mastodon:infosec-exchangeother13d ago kagi ↗

🚨New ransom group blog posts!🚨 Group name: kairos Post title: Leisure Coast Kitchens Info: https:// cti.fyi/groups/kairos.html Group name: qilin Post title: In The Company of Huskies Info: https:// cti.fyi/groups/qilin.html Group name: qilin Post title: Reddrop Group Info: https:// cti.fyi/groups/qilin.html # ransomware # cti # threatintelligence # cybersecurity # infosec

🚨New ransom group blog post!🚨 Group name: blacknevas Post title: Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, EcoPolymer, Milkrun Lojistik) Info: https:// cti

mastodon:infosec-exchangeother13d ago kagi ↗

🚨New ransom group blog post!🚨 Group name: blacknevas Post title: Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, EcoPolymer, Milkrun Lojistik) Info: https:// cti.fyi/groups/blacknevas.html # ransomware # cti # threatintelligence # cybersecurity # infosec