sicarii
Sicarii is a pro-Israeli/Jewish-branded ransomware-as-a-service operation that emerged in late 2025, explicitly targeting Arab and Muslim-majority organizations while avoiding Israeli systems, exploiting exposed RDP services and Fortinet devices, with its admin later instructing operators to migrate to the BQTLock platform.
| Name | Country | Sector | Date |
|---|---|---|---|
| Triad Packaging | US | Manufacturing | 2026-01-05T09:38:40.545422+00:00 |
Data from ransomware.live