RunSomeWares
Known ransomware group ACTIVE Currently active
RunSomeWares is an emerging ransomware group that surfaced in February 2025 with initial victims across supply-chain services, financial services, accounting, and manufacturing, with unclear deployment of an encryptor vs. pure data-theft extortion.
1
Total Claims
1
Critical
—
Records Claimed
1
Industries Hit
Active span: Oct 8, 2026 – Oct 8, 2026 · 1 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Oct 2026 (1)Oct 2026
LessMore
Oct 2026Top Targeted Industries
Healthcare 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
3
Known leak sites