All ransomware groups
bert
7 tracked victims
·first seen 2025-04-04·last activity 2025-06-10Group profile
BERT is a newly emerged ransomware group first identified in mid-2025, targeting Windows and Linux platforms across healthcare, technology, and event services sectors in Asia, Europe, and the US, with ransomware derived from a Linux variant of REvil using AES encryption and multi-threaded file locking.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-06-10 | S5 Agency Worlds5agencyworld.com | Transportation/Logistics | GB |
| 2025-06-05 | Columbia TIcolumbiati.com.br | Technology | CO |
| 2025-05-22 | Wawasan Dengkil Sdn Bhdwawasandengkil.com.my | Construction | MY |
| 2025-05-16 | ALL RING TECH CO., LTD.allringtech.com | Technology | TW |
| 2025-04-30 | SIMCO Electronicssimco.com | Technology | US |
| 2025-04-09 | Yozgat City Hospitalyozgatsehir.saglik.gov.tr | Healthcare | TR |
| 2025-04-04 | National Ticket Companynationalticket.com | Business Services | US |

