🔴 Prodiel — listed by Qilin
📍 Spain · Energy & Utilities · 12 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/prodiel-qilin-2026

🔴 Prodiel — listed by Qilin
📍 Spain · Energy & Utilities · 12 Oct 2026
🏴 Qilin has listed 2,344 victims since October 2022.
https://cyberthreatintelligence.net/ransomware-victim/prodiel-qilin-2026
🔴 Pusan Newport Company (container terminal operations) — listed by N0n
📍 South Korea · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
🔴 Saehan Marine (ship agency operations) — listed by N0n
📍 South Korea · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/saehan-marine-ship-agency-operations-n0n-2026
🔴 Samjoo Maritime (ship management) — listed by N0n
📍 South Korea · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/samjoo-maritime-ship-management-n0n-2026
🔴 Samudera (coastal shipping operations) — listed by N0n
📍 Indonesia · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/samudera-coastal-shipping-operations-n0n-2026
🔴 Santos Brasil (port operations) — listed by N0n
📍 Brazil · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/santos-brasil-port-operations-n0n-2026
🔴 Spo****** Public Schools — listed by Nightspire
📍 Education · 12 Oct 2026
🏴 Nightspire has listed 341 victims since February 2025.
https://cyberthreatintelligence.net/ransomware-victim/spo-public-schools-nightspire-2026
🔴 Superterminais (port terminal operations) — listed by N0n
📍 Brazil · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
pyronut, a fake Pyrogram fork, hides a Telegram-controlled RCE backdoor in Client.start(). https://intel.threadlinqs.com/threat/TL-2026-3366 #ThreatIntel #Pyronut #telegram #Python
🔴 T.S. Lines (intra-Asia container shipping) — listed by N0n
📍 Taiwan · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
🔴 T2S (terminal systems operations) — listed by N0n
📍 Brazil · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
https://cyberthreatintelligence.net/ransomware-victim/t2s-terminal-systems-operations-n0n-2026
🔴 Tsuneishi / Kambara Kisen (shipbuilding and ship management) — listed by N0n
📍 Japan · Manufacturing · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
🔴 TTI Algeciras (container terminal operations) — listed by N0n
📍 Spain · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
🔴 VIATechnik, tech leader, added to Metaencryptor's leak site
📍 United States · Technology · 12 Oct 2026
🏴 Metaencryptor has listed 55 victims since August 2023.
https://cyberthreatintelligence.net/ransomware-victim/viatechnik-metaencryptor-2026
🔴 Yusen Logistics Hong Kong (3PL logistics) — listed by N0n
📍 Hong Kong · Transportation · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
🔴 ZPMC (port machinery and terminal engineering) — listed by N0n
📍 China · Manufacturing · 12 Oct 2026
🏴 N0n has listed 9 victims since September 2026.
Retail giant Ahold Delhaize takes systems offline after cyberattack
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
XWorm is back as a plugin platform - rootkit, webcam spying and ransomware loaded in memory on demand. https://intel.threadlinqs.com/threat/TL-2026-3363 #ThreatIntel #XWorm #Remcos #XCoderTools
Critical vulnerabilities in Gitea and Bricksforge WordPress plugins face active exploitation as CyberXero deploys autonomous AI agents and P7 DarkSword raids iOS keychains. Explore our full technical brief.