🇲🇳Mongolia
Unknown•Ranked #96 of 199•score 4221% vs global avg·Top 48%
Ransomware
9
Top: funksec
Defacements
0
No defacements
Critical incidents
1
High-severity ransomware
Severity breakdown
- Crit111%
- High00%
- Med889%
- Low00%
Ransomware activity over time
1 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-19868
SonicWall: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
Added 2026-11-06
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
Recent ransomware incidents in Mongolia
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-10-13 | Advanced Imaging Solutions | Technology | play | CRITICAL |
| 2025-01-27 | rtdc.gov.mn | Public Sector | babuk2 | MEDIUM |
| 2025-01-15 | barilga.gov.mn | Public Sector | funksec | MEDIUM |
| 2025-01-05 | bayan-ulgii.cfga.gov.mn | Public Sector | funksec | MEDIUM |
| 2024-12-31 | tsag-agaar.gov.mn | Transportation/Logistics | funksec | MEDIUM |
| 2024-12-28 | timely.mn | Technology | darkvault | MEDIUM |
| 2024-12-20 | ndc.energy.mn | Energy | funksec | MEDIUM |
| 2024-12-17 | rtdc.gov.mn | Public Sector | funksec | MEDIUM |
| 2024-10-30 | Intermed Hospital Mongolia | Healthcare | spacebears | MEDIUM |
Top targeted sectors
- Public Sector4
- Technology2
- Transportation/Logistics1
- Energy1
- Healthcare1
Threat actors active here
- funksec5
- play1
- babuk21
- darkvault1
- spacebears1