HackerFeeds
All ransomware groups

d1r

3 tracked victims
·first seen 2026-07-13·last activity 2026-07-13

Group profile

D1R Claims Synopsys and Bosch Breaches, but Synopsys Disputes Intrusion

MITRE ATT&CK TTPs

TA0001

Initial Access

  • T1078Valid Accounts

  • T1190Exploit Public-Facing Application

TA0003

Persistence

TA0004

Privilege Escalation

TA0005

Stealth

TA0006

Credential Access

  • T1111Multi-Factor Authentication Interception

  • T1649Steal or Forge Authentication Certificates

TA0009

Collection

  • T1213Data from Information Repositories

  • T1530Data from Cloud Storage

TA0010

Exfiltration

  • T1020Automated Exfiltration

  • T1041Exfiltration Over C2 Channel

  • T1048Exfiltration Over Alternative Protocol

  • T1567Exfiltration Over Web Service

TA0040

Impact

  • T1486Data Encrypted for Impact

  • T1657Financial Theft

Recent victims

DateWebsite / victimSectorCountry
2026-07-13
bosch.de
Boschbosch.de
ManufacturingDE
2026-07-13
arm.com
ARMarm.com
TechnologyGB
2026-07-13
synopsys.com
SynopsysSynopsys.Com
TechnologyUS