threeam
A new Ransomware family identified by the name '3AM' or 'ThreeAM' in September 2023. The ransomware operation was observed by the Symantec team, in which a ransomware affiliate attempted to deploy another ransomware, LockBit, on the target network and then switched to 3AM when LockBit was reportedly blocked.<BR> > <BR> > The ransomware operation, according to the publication on its Tor-based website, has been operating since mid-August 2023, according to the publication from its first victim.<BR>Source: https://github.com/crocodyli/ThreatActors-TTPs
| Name | Country | Sector | Date |
|---|---|---|---|
| kkp.law | US | Business Services | 2025-05-25 19:01:43.823783 |
| iss-na.com | US | Business Services | 2025-05-25 19:00:12.335947 |
| icgad.com | US | Not Found | 2025-05-25 18:58:24.301561 |
| dbhcares.com | US | Healthcare | 2025-05-25 18:56:57.070730 |
| icmtx.com | US | Technology | 2025-05-25 18:55:24.342451 |
| jastreet.com | US | Not Found | 2025-05-25 18:53:46.310151 |
| neffendorfblockercpa.com | US | Financial Services | 2025-05-25 18:52:17.923076 |
| gosvt.com | US | Entertainment | 2025-05-25 18:50:48.654588 |
| vazirilaw.com | US | Business Services | 2025-05-25 18:49:20.292983 |
| leonardo.com | IT | Technology | 2025-02-13 17:33:42.859573 |
| sehma.com | DE | Not Found | 2025-02-11 10:39:40.635455 |
| corehandf.com | US | Consumer Services | 2025-02-05 21:28:55.975585 |
| soitinlaine.fi | FI | Not Found | 2025-01-30 12:03:16.729283 |
| anwsd.org | US | Not Found | 2025-01-15 10:09:30.804720 |
| hapsch.de | DE | Not Found | 2025-01-09 13:02:18.818828 |
| kuritaamerica.com | JP | Manufacturing | 2024-12-17 16:43:58.575238 |
| hobokennj.gov | US | Government | 2024-12-04 14:52:13.501104 |
| midstatesindustrial.com | US | Manufacturing | 2024-11-13 11:52:33.763352 |
| anuenterprise.com.au | AU | Business Services | 2024-10-31 13:32:27.777225 |
| inhometexas.com | US | Healthcare | 2024-10-31 13:30:21.335257 |
| caillau.com.br | BR | Manufacturing | 2024-10-31 13:28:14.909627 |
| sandray.com | US | Not Found | 2024-10-31 13:26:09.238307 |
| mpspromotions.com | AU | Business Services | 2024-10-31 13:24:02.818096 |
| freedomhomecare.net | US | Healthcare | 2024-10-31 13:21:56.052271 |
| carolinaarthritis.com | US | Healthcare | 2024-10-24 14:15:47.921030 |
| oklahomasleepinstitute.com | US | Healthcare | 2024-10-10 19:03:38.350019 |
| verco.co.uk | GB | Manufacturing | 2024-09-30 19:49:44.375579 |
| carlile-group.com | GB | Transportation/Logistics | 2024-09-30 17:50:26.706922 |
| sacredheart.southwark.sch.uk | GB | Education | 2024-09-30 17:48:19.072618 |
| mctas.org.au | AU | Healthcare | 2024-09-30 17:46:11.152081 |
| mnpl.com.sg | SG | Transportation/Logistics | 2024-09-30 17:44:02.977764 |
| gestiriego.com | ES | Agriculture and Food Production | 2024-09-18 12:12:40.459140 |
| brunswickhospitalcenter.org | US | Healthcare | 2024-09-12 18:10:19.300440 |
| thermalsolutionsllc.com | US | Manufacturing | 2024-05-16 04:42:14.864184 |
| escriba.com.br | BR | Technology | 2024-05-16 04:40:59.779392 |
| compagniedephalsbourg.com | FR | Business Services | 2024-04-15 07:34:47.586080 |
| kh.org | US | Healthcare | 2024-03-25 11:47:51.622458 |
| moore-tibbits.co.uk | GB | Business Services | 2024-02-27 12:56:58.596501 |
| mtmrobotics.com | US | Technology | 2024-02-22 14:42:10.845053 |
| abcor.com.au | AU | Business Services | 2024-02-22 14:41:32.083360 |
| doneff.com | US | Agriculture and Food Production | 2024-02-21 12:44:37.055126 |
| garonproducts.com | US | Manufacturing | 2024-02-12 22:29:08.563484 |
| etsolutions.com.mx | MX | Business Services | 2024-02-01 23:04:26.676181 |
| thecsi.com | CA | Business Services | 2024-01-12 19:27:43.396320 |
| pharrusa.com | US | Manufacturing | 2024-01-12 19:26:36.651371 |
| woodruffenterprises.com | — | — | 2023-12-12 17:42:41.144445 |
| shareharris.com | US | — | 2023-12-12 17:42:04.877909 |
| syrtech.com | — | — | 2023-12-06 08:57:03.237187 |
| ussignandmill.com | — | — | 2023-12-05 16:11:22.474851 |
| carrellblanton.com | — | — | 2023-11-27 16:23:11.519078 |
Data from ransomware.live