pear
Known ransomware group ACTIVEPure Extraction And Ransom (PEAR) Team is the community of highly responsible and strictly disciplined members. We are a private team and have nothing common with any other threat actors. We've been monitoring this field for a long-long time. So, we understand all the processes and know well how it all works.
6
Total Claims
5
Critical
—
Records Claimed
3
Industries Hit
Active span: May 2, 2026 – Nov 2, 2026 · 6 organizations targeted
Actor Threat Profile
Activity Timeline
Peak: Oct 2026 (2)Top Targeted Industries
Tradecraft & Infrastructure
0
Documented tools
8 / 20
MITRE tactics / techniques
22
Known leak sites