ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
TiMc
1 incidentes
1 paises
1 sectores
ransomware Ultimo: 2026-06-29
TiMc is a financially motivated ransomware group that emerged in April 2026, known for employing a double extortion model. The group exfiltrates sensitive data from its victims and subsequently threatens public release if ransom demands are not met. While details about their operational structure remain limited, their activity has been consistently reported since their appearance, indicating a focused and persistent threat actor in the ransomware landscape.
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| Web | unknown | www.breachsense.com | info.itimcloud.cloud - Pysa Data Breach |
| Web | unknown | getbootstrap.com | itimcloud.cloud - Pysa Data Breach |
| Repositorio | unknown | github.com | itimcloud.cloud - Pysa Data Breach |
| Repositorio | unknown | github.com | itimcloud.cloud - Pysa Data Breach |
| Web | unknown | www.breachsense.com | itimcloud.cloud - Pysa Data Breach |
| Repositorio | unknown | github.com | itimcloud.cloud - Pysa Data Breach |
| DLS / leak site | unknown | ransomware.anggipradana.com | Ransomware Victim: C* (Icarus) |
| DLS / onion | unknown | incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion | Ransomware Victim: callhorton.com (incransom) |
| DLS / onion | unknown | threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion | Ransomware Victim: consultic.be (threeam) |
| DLS / leak site | unknown | nitter.net | Ransomware Monitor: Actor: #payload Victim: Clínica La Sabana Date: 2026-06-26 17:19:50 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#payload” Ransomware group has added Clínica La Sabana to its victims. |
| X/Twitter | unknown | x.com | Ransomware Monitor: Actor: #payload Victim: Clínica La Sabana Date: 2026-06-26 17:19:50 UTC+3 According to #DarkWeb #Ransomware activity detected by the ThreatMon Threat Intelligence Team. The “#payload” Ransomware group has added Clínica La Sabana to its victims. |
Paises afectados
Paises objetivo (SOCRadar)
Argentina
Spain
United Kingdom
United StatesSectores atacados
Healthcare (1)
Sectores objetivo (SOCRadar)
Agriculture&ForestryManufacturingRetailInformation ServicesProfessional&Technical ServicesEnterprises & HoldingHealthCare & Social AssistanceOtherHospitalsComputer Design & Services