NetRunner is a ransomware group active from at least 2025 targeting diverse sectors including healthcare, telecommunications, manufacturing, and agriculture across Japan, Italy, the US, and Jordan, notably demanding a $100M ransom from Nippon Medical School Musashi Kosugi Hospital.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
netrunner ransomware
*/
rule netrunner_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.netrunner"
description = "Detects netrunner ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "netrunner" ascii nocase
$name2 = "NETRUNNER" ascii
$onion = "netrunner.onion" ascii nocase
condition:
any of them
}
You Have Been Breached By The NetRunner Team We See You Noticed The Strange Egress Traffic From Your Network, That's Us Uploading 960GB Of Your Sensitive And Compromising Data To Our Servers Data Includes: - Complete Schema, Drawing, Design, Spec, BOM, Issue And Complaint Related To KIA, Hyundai - Financial Information Including Bank Statement, Audit, Invoice, Budget, Sale, Annual Report, Agreement And Tax Issue - Employees PII, CV, Medical Record And More ...... If You Refuse To Contact Us Or We Do Not Come To An Agreement, YOUR DATA WILL BE PUBLISHED >>>> How To Contact Us 1. Download And Install [redactado] Anonymous Chat From The Official Website [redactado] 2. Add [redactado] To Your Contact List, This Is The Fastest Way To Contact Us * If You Did Not Hear From Us Within 24 hours, Send Us An Email At [redactado] >>>> Visit Our Blog And See File Samples 1. Download And Install Tor Browser From [redactado] 2. Go To Your Private View Link MAIN [redactado] MIRROR [redactado] >>>> Your personal DECRYPTION ID: [snip] >>>> Warning! Do not DELETE or MODIFY any files, it can lead to recovery problems!
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates (MAGOPSA) is one of the largest single groups of gynecologic oncologists in the mid-Atlantic region.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates | US | Healthcare | — | 8 oct 2026 |
| M** A******* G********** O******* a** P***** S****** A********* | US | Not Found | — | 5 oct 2026 |
| Precon Marine Inc | Transportation | — | 3 oct 2026 | |
| Main Place Mall | MY | Retail & E-Commerce | — | 2 oct 2026 |
| P***** M***** I** | Not Found | — | 30 sept 2026 | |
| M*** P**** M*** | MY | Not Found | — | 28 sept 2026 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
Precon Marine, Inc. is a diversified marine contractor specializing in heavy marine construction and advanced subsea services.
Main Place is part of a mixed development that combines residence, leisure, retail and dining to bring you the ultimate city-suburban lifestyle.