Active · 378 victims
Exploits Fortinet and Exchange vulnerabilities; no public leak site, direct negotiation only.
Last observed: May 31, 2026