FulcrumSec is a data extortion group active since approximately September 2025, specializing in high-speed exfiltration of cloud-hosted databases by exploiting unrotated API keys and misconfigured cloud permissions rather than deploying encryption, with known victims including Australian fintech youX and LexisNexis.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
fulcrumsec ransomware
*/
rule fulcrumsec_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.fulcrumsec"
description = "Detects fulcrumsec ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "fulcrumsec" ascii nocase
$name2 = "FULCRUMSEC" ascii
$onion = "fulcrumsec.onion" ascii nocase
condition:
any of them
}
[AI generated] Dustin Group is a Swedish technology reseller and IT solutions provider headquartered in Stockholm, Sweden. The company operates primarily in the Nordic and Benelux regions, offering hardware, software, and IT services to businesses and public sector organizations. Its product portfolio includes computers, networking equipment, and cloud solutions. Dustin serves both SMBs and large enterprises, positioning itself as a one-stop shop for IT procurement and digital transformation support.
[AI generated] Novo Nordisk is a Danish multinational pharmaceutical company headquartered in Bagsværd, Denmark. Founded in 1923, it specializes in treatments for diabetes, obesity, hemophilia, and other chronic conditions. The company is a global leader in insulin production and develops drugs such as semaglutide. It operates in over 80 countries and is one of Europe's most valuable corporations by market capitalization.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Dustin Group | SE | Technology | — | 11 sept 2026 |
| Novo Nordisk | DK | Healthcare | — | 16 jun 2026 |
| Global Schools Foundation | SG | Education | — | 10 jun 2026 |
| LexisNexis | US | Professional Services | — | 1 may 2026 |
| Nordstern Technologies | MX | Technology | — | 1 may 2026 |
| IMEVI | CO | Professional Services | — | 1 may 2026 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
[AI generated] Global Schools Foundation is a Singapore-based non-profit organization operating in the international education sector. It manages a network of private schools across Asia and the Middle East under brands such as Global Indian International School. The foundation focuses on providing quality education with an Indian curriculum framework to students from diverse nationalities, emphasizing holistic development and academic excellence across multiple campuses worldwide.
[AI generated] LexisNexis is a global information and analytics company headquartered in the United States. It operates in the legal, regulatory, and business intelligence industries, providing research tools, data analytics, and risk management solutions. Its platforms are widely used by legal professionals, law enforcement, and enterprises to access vast databases of legal documents, news, public records, and compliance information.
[AI generated] N/A
[AI generated] N/A