Lamashtu is an extortion group that first appeared in April 2026, claiming attacks against organizations in France, Romania, and Thailand across energy, pharmaceutical, and film sectors; it has not yet been confirmed as operating actual file-encrypting ransomware rather than pure data-theft extortion.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
=======================================================================
YOUR NETWORK HAS BEEN COMPROMISED
=======================================================================
__ _ _ __ _____
/ / /_\ /\/\ /_\ / _\ /\ /\/__ \/\ /\
/ / //_\\ / \ //_\\ \ \ / /_/ / / /\/ / \ \
/ /___/ _ \/ /\/\ \/ _ \_\ \/ __ / / / \ \_/ /
\____/\_/ \_/\/ \/\_/ \_/\__/\/ /_/ \/ \___/
What happened?
------------------------------------------
Your corporate network has been fully compromised. All critical files across your systems have been encrypted with a military-grade algorithm. Backups connected to the network have been encrypted too.
Additionally, a significant volume of sensitive data has been exfiltrated, including:
- Financial records and contracts;
- Employee personal data (PII);
- Client databases;
- Internal communications;
- And much more that you wouldn't want to be public.
Regulatory consequences:
------------------------------------------
Your data is subject to multiple regulatory frameworks. A confirmed breach triggers:
[GDPR — EU/EEA]
- Mandatory notification to authorities within 72 hours
- Notification to ALL affected individuals
- Fines up to 4% of annual global turnover or €20,000,000
- Regulatory investigation, public disclosure, class-action lawsuits from clients and employees
[CCPA/CPRA — California, USA]
- Statutory damages of $100–$750 PER consumer PER incident
- With thousands of records, this adds up to millions
- California AG investigation and civil penalties up to $7,500 per intentional violation
- Private right of action — your customers can sue directly
[HIPAA — if applicable]
- If ANY health-related data was in your systems:
- Fines from $100 to $50,000 PER record, up to $1.5M/year per violation category
- Criminal penalties including imprisonment
- HHS public "Wall of Shame" — permanent reputational record
The math is simple:
Our price << regulatory fines + lawsuits + reputation loss
Resolve this privately. No regulators, no lawsuits, no headlines. Nobody has to know.
If you refuse to negotiate, we will notify every regulatory authority whose jurisdiction covers your data — and your clients whose data we hold.
What NOT to do:
------------------------------------------
- DO NOT contact law enforcement.
They will seize your equipment for months and return it with "sorry, we can't help you with that". They cannot decrypt your files. They cannot prevent the data leak. They WILL forbid you from negotiating, leaving you with nothing.
- DO NOT attempt to restore from backups without verifying them first. Corrupted restores will cause permanent data loss.
- DO NOT MODIFY encrypted files. This will make recovery impossible.
- DO NOT hire a "recovery firm". Most of them simply contact us on your behalf and charge you a premium on top of our price.
What SHOULD you do:
------------------------------------------
1. Read this note completely.
2. Contact us using the information below.
3. You will receive proof that we have your data and can decrypt.
4. We agree on terms. You pay. You get everything back.
5. We delete your data from our servers. Incident stays private.
This is a business transaction. We have a reputation to maintain. Every client who has paid has received full decryption and data deletion.
Contact:
------------------------------------------
Your own chat with us. Use 'Tor Browser' to access it:
- URL: [redactado]
- Access token: [snip]
Here is our blog with files of victims who refused to pay:
- URL: [redactado]
If law enforcement has advised you not to negotiate, but you understand they cannot actually help you — use the backup channel. Our actual additional contacts you can find on our blog in section 'CONTACTS'.
We are available 24/7.
Deadline:
------------------------------------------
You have 3 days to make contact. After that:
- The price doubles.
- AfteFluge Audiovisuales is a Spanish company and market leader in AV equipment rental (sound, lighting, video, staging) for concerts, festivals, corporate events, TV and film. It operates across Spain (Madrid, Barcelona, Bilbao, Valencia, Ibiza, Galicia)
Bender GmbH Tribunenbau is a German manufacturer of mobile and permanent grandstands, stages, podiums and temporary structures for events. It designs, rents, sells and services tribunes for stadiums, festivals and concerts.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Fluge Audiovisuales | ES | Other | — | 5 oct 2026 |
| Bender Tribunenbau | DE | Manufacturing | — | 5 oct 2026 |
| TRANS LOGROÑO SOCIEDAD ANONIMA | ES | Transportation | — | 5 oct 2026 |
| Grupo Industrial Tauro | MX | Manufacturing | — | 5 oct 2026 |
| Dr Damiel Pugliese | Healthcare | — | 30 sept 2026 | |
| Astidental di Sabbione | IT | Manufacturing | — | 30 sept 2026 |
| Vinco Energy | US | Energy & Utilities | — | 30 sept 2026 |
| Becker Logistik | DE | Transportation | — | 30 sept 2026 |
| Wilhelm Kühne | DE | Manufacturing | — | 30 sept 2026 |
| FIDUCIAL | FR | Financial Services | — | 30 sept 2026 |
| Virtual Ideas | AU | Technology | — | 30 sept 2026 |
| PROJAHN | DE | Other | — | 30 sept 2026 |
| Altmannshofer Sicherheits-Videotechnik | DE | Manufacturing | — | 30 sept 2026 |
| GERLON | DE | Not Found | — | 30 sept 2026 |
| Great Foods | EG | Agriculture and Food Production | — | 17 jun 2026 |
| PatayaFood | TH | Agriculture and Food Production | — | 10 jun 2026 |
| Shanpoornam Metals | MY | Manufacturing | — | 29 may 2026 |
| Depósito Dental Universitario | MX | Healthcare | — | 11 may 2026 |
| Sistemas Electrónicos y de Telecomunicaciones | MX | Technology | — | 11 may 2026 |
| GRUPO RONDA | MX | Professional Services | — | 14 abr 2026 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
TRANS-LOGROÑO, S.A. is a Spanish road freight and logistics company based in Logroño (La Rioja). It provides road haulage (CNAE 4941), freight forwarding, and warehouse services including storage, order picking, and tank cleaning.
is a Mexican steel-products manufacturer based in Monterrey (Nuevo León): perimeter protection and mesh (brands Euroreja®, Reja Tauro®, Tauro®, Serpentina®), high-security/anti-glare mesh, razor coil, industrial railings and bollards;
Dr. Daniel P. Pugliese is a certified Argentine accountant graduated from the prestigious University of Buenos Aires (U.B.A.). He is officially registered with the Professional Council of Economic Sciences of Buenos Aires (C.P.C.E.C.A.B.A.), which
is a leading Italian distributor with over 60 years of experience specializing in dental equipment, instruments, and dental laboratory supplies. The company provides comprehensive services, including dental office turnkey design, digital workflow