lamashtu ransomware group
Lamashtu is an extortion group that first appeared in April 2026, claiming attacks against organizations in France, Romania, and Thailand across energy, pharmaceutical, and film sectors; it has not yet been confirmed as operating actual file-encrypting ransomware rather than pure data-theft extortion.
- Claims in 7 days
- 0
- Claims in 30 days
- 7
- Reported techniques
- 0
Listings on leak sites are claims by criminals. They are unverified and can be false. coldbraid shows counts here, not names.
Where it claims victims
| Country | Claims in 60 days |
|---|---|
| Germany | 5 |
| France | 2 |
Sectors
| Sector | Claims in 60 days |
|---|---|
| Manufacturing | 3 |
| Retail & E-Commerce | 1 |
| Agriculture and Food Production | 1 |
| Energy & Utilities | 1 |
| Other | 1 |