Devman Active
Targets industrial and manufacturing companies. Uses custom encryption.2
Total Victims
2024-11-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
16.5d
Avg Delay
0
Negotiations
ONION URLS
qljmlmp4psnn3wqskkf3alqquatymo6hntficb4rhq5n76kuogcv7zyd.onion
wugurgyscp5rxpihef5vl6b6m5ont3b6sezhl7boboso2enib2k3q6qd.onion
devmanblggk7ddrtqj3tsocnayow3bwnozab2s4yhv4shpv6ueitjzid.onion
TOOLS
LaZagne
TDSSKiller
FILE EXTENSIONS
.ransom
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | Sapphire Technologies | United Kingdom | Telecommunications | Removed |
| 2026-03-06 | Sapphire Services | Poland | Media | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes