MetaEncryptor is a ransomware group first observed in mid-2023, targeting medium-to-large enterprises in legal, technology, logistics, manufacturing, and finance sectors primarily in the UK, Europe, and Southeast Asia, using AES-256/RSA-2048 encryption and double extortion.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
metaencryptor ransomware
*/
rule metaencryptor_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.metaencryptor"
description = "Detects metaencryptor ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "metaencryptor" ascii nocase
$name2 = "METAENCRYPTOR" ascii
$onion = "metaencryptor.onion" ascii nocase
condition:
any of them
}
Woodlore is manufacturer specializes in laminate casegood production for furniture. Revenue $ 30 M
Founded in 1910, Weber Water Resources has been providing the widest range of water resource solutions at the lowest available risk to clients for over a century. Through our superior problem solving ability, Weber Water Resources partners with public and private clients to achieve the most equitable outcome possible on each project. revenue $25 M
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Woodlore International Inc. | CA | Other | — | 23 ago 2026 |
| Weber Water Resources | US | Energy & Utilities | — | 23 ago 2026 |
| MPA Pharma GmbH | DE | Healthcare | — | 23 ago 2026 |
| Aquamar Inc | US | Agriculture and Food Production | — | 23 ago 2026 |
| Corona Corporation | JP | Other | — | 23 ago 2026 |
| FactoryFive | US | Manufacturing | — | 23 ago 2026 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. With over 35 years of expertise in the pharmaceutical market, they also provide contract manufacturing services for third parties. Their primary clients include pharmacies and businesses in need of reliable pharmaceutical and medical products. Revenue $614 Million
Aquamar, Inc. specializes in providing high-quality, wild-caught seafood products that are both delicious and nutritious. The company targets markets in the U.S., Canada, and Latin America, focusing on retail and foodservice sectors.
The company specializes in creating a comfortable home environment, focusing on heating, cooling and hot water technologies. It was founded at April 1937, and now have more than 2000 employee. Corona Corporation is stock listed, ticker 5909.T at Tokyo Stock Exchange (Standard)
Factory Five Racing Inc — kit-car manufacturer (Cobra replicas, GTM, Type 65 Coupe, 33 Hot Rod). 9 Tow Road, Wareham MA 02571-1086. ~90 employees, 158 endpoints. Revenue $5.5-6.5M/yr (credit card processing ~$4.3M, avg ticket $1245). Exfiltrated data categories (~130GB): correspondence (PST archives), CRM contacts (GoldMine), ERP/pricing, engineering CAD (SolidWorks/Rhino), banking statements, insurance policies, tax documentation, legal contracts/NDAs, database backups. Includes detailed materials on several ongoing lawsuits — parties, witnesses, testimonies, and related case files, alongside private correspondence. Risk zones: PCI DSS (card processing $4.3M/yr), MA 201 CMR 17.00 (Massachusetts personal data protection), GDPR (EU clients), CCPA (California clients), active IRS audit, active MA Sales Tax audit, FTC Safeguards Rule. Reputational: customer warranties, partner contracts (SEMA supplier), licenses, litigation exposure. CEO: David T. Smith.