HackerFeeds
All ransomware groups

d1r

3 tracked victims
·first seen 2026-07-13·last activity 2026-07-13

Activity analysis

HackerFeeds has tracked 3 victims claimed by d1r since July 2026 — ranking #285 of 332 groups (0% of all tracked ransomware victims). It posted 0 victims in the last 90 days, down 100% on the previous 90 days (3). Its most-targeted sector is Technology (2 victims), followed by Manufacturing (1). The United States accounts for 1 victims (33% of those with a known location).

Victims per year

  • 20263

Top sectors

  • Technology2
  • Manufacturing1

Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology

Group profile

D1R Claims Synopsys and Bosch Breaches, but Synopsys Disputes Intrusion

MITRE ATT&CK TTPs

TA0001

Initial Access

  • T1078Valid Accounts

  • T1190Exploit Public-Facing Application

TA0003

Persistence

TA0004

Privilege Escalation

TA0005

Stealth

TA0006

Credential Access

  • T1111Multi-Factor Authentication Interception

  • T1649Steal or Forge Authentication Certificates

TA0009

Collection

  • T1213Data from Information Repositories

  • T1530Data from Cloud Storage

TA0010

Exfiltration

  • T1020Automated Exfiltration

  • T1041Exfiltration Over C2 Channel

  • T1048Exfiltration Over Alternative Protocol

  • T1567Exfiltration Over Web Service

TA0040

Impact

  • T1486Data Encrypted for Impact

  • T1657Financial Theft

Recent victims

DateWebsite / victimSectorCountry
2026-07-13ManufacturingDE
2026-07-13TechnologyGB
2026-07-13TechnologyUS