RU

RunSomeWares

Known ransomware group ACTIVE
Currently active

RunSomeWares is an emerging ransomware group that surfaced in February 2025 with initial victims across supply-chain services, financial services, accounting, and manufacturing, with unclear deployment of an encryptor vs. pure data-theft extortion.

1

Total Claims

1

Critical

—

Records Claimed

1

Industries Hit

Active span: Oct 8, 2026 – Oct 8, 2026 · 1 organizations targeted

Currently active
Activity 1.9 Severity 10.0 Sectors 2.3 Tooling 0.0

Actor Threat Profile

Activity Timeline

Peak: Oct 2026 (1)
Oct 2026
LessMore
Oct 2026

Share this profile

Shareable intel card for RunSomeWares

Top Targeted Industries

Healthcare 1

Tradecraft & Infrastructure

0

Documented tools

0 / 0

MITRE tactics / techniques

3

Known leak sites

Full intelligence profile on ransomware.live →

Targeted Organizations

Claims by RunSomeWares

Never Miss a Critical Alert

CVE advisories, breach reports, and threat intel — delivered daily to your inbox.