cephalus
Cephalus is a ransomware group active from mid-2025 that leverages stolen RDP credentials to deploy a Go-based ransomware payload via DLL sideloading, targeting law firms, healthcare, financial services, and IT firms across the US and Japan with 19 known victims.
| Name | Country | Sector | Date |
|---|---|---|---|
| One-LUX | GB | Not Found | 2025-08-29T03:21:19.126983+00:00 |
| Shropdoc | GB | Healthcare | 2025-08-29T03:20:54.154382+00:00 |
| Shelbourne Accountants | IE | Financial Services | 2025-08-29T03:20:29.137532+00:00 |
| Delta Information Systems | US | Technology | 2025-08-29T03:20:04.796498+00:00 |
| Colorado Health Network Inc | US | Healthcare | 2025-08-28T07:09:07.168732+00:00 |
| Texas Pregnancy Care Network | US | Healthcare | 2025-08-28T02:40:01.124485+00:00 |
| wilderlawfirm | US | Not Found | 2025-08-28T02:39:36.819468+00:00 |
| CoCo Yachts | NL | Manufacturing | 2025-08-28T02:39:08.861217+00:00 |
| txpregnancy.org - Fake Abortion Clinics Exposed | US | Not Found | 2025-08-26T15:03:10.616825+00:00 |
| Town of Vienna, VA | US | Public Sector | 2025-08-26T15:03:02.808420+00:00 |
| Lewis Baach Kaufmann Middlemiss PLLC | US | Business Services | 2025-08-26T14:59:00.083442+00:00 |
| Lee & Associates | US | Business Services | 2025-08-26T14:58:36.183295+00:00 |
| Sherman, Silverstein, Kohl, Rose & Podolsky, P.A. | US | Business Services | 2025-08-26T14:58:21.814773+00:00 |
| Guerrero Mears LLP | US | Business Services | 2025-08-26T14:57:42.406100+00:00 |
| LPL Financial | US | Financial Services | 2025-08-26T14:53:45.678482+00:00 |
| K Strategies Marketing and Public Relations | US | Business Services | 2025-08-26T14:53:07.998134+00:00 |
| BAR Architects & Interiors | — | Construction | 2025-08-26T14:52:33.008897+00:00 |
| SystemExec Co., Ltd. | JP | Technology | 2025-08-26T14:44:13.444706+00:00 |
| CareSTL Health | US | Healthcare | 2025-08-26T14:43:37.199191+00:00 |
Data from ransomware.live