Ransomware.live discovered on 2026-04-27 that centrum.sk has been claimed by Apt73 ransomware group

Elections.mia.gov.am, in Armenia, was targeted in a ransomware claim by “WOLVES OF TURAN,” attributed to threat actor APT73. The attackers’ contact and extortion messaging referenced their operation against the victim, impacting Armenia #Armenia

Narit.or.th in Thailand was impacted by ransomware activity attributed to the threat actor APT73, associated with The National Astronomical Research Institute of Thailand. The attack resulted in disruption of services and data encryption, affecting operations in #Thailand

The ransomware claim alleges that threat actor APT73 targeted dgcement.com, the website of D.G. Khan Cement Company Limited (DG Cement), a major cement producer in Algeria. The impacted country(s) is: #Algeria

APT73 claims to have compromised the hl.co.uk domain in the United Kingdom by deploying ransomware against Hargreaves Lansdown. The hl.co.uk domain is owned by Hargreaves Lansdown (legal name "Hargreaves Lansdown Asset Manage....") #UnitedKingdom

Hackers from the BASHE ransomware gang, also known as APT73, have added ICICI Bank, a major financial institution in India, to their victim site on the dark web and left three days to pay the ransom.

Indian financial giant ICICI Bank as the notorious BASHE ransomware group, also known as Eraleign (APT73), claims responsibility for a significant data breach.

Edit Introduction A new cybersecurity incident has drawn attention to the growing risks facing government institutions worldwide after the ransomware group WOLVES OF TURAN reportedly claimed responsibility for an attack targeting Armenia's election-related infrastructure. According to threat monitoring reports circulating on social media, the group, which has been linked by researchers to the advanced threat cluster known as APT73, posted extortion-related messages directed at a public sector victim associated with Armenia's Ministry of Internal Affairs election platform.

Introduction: Rising Noise from the Dark Web Intelligence Channels The cyber threat landscape continues to intensify as ransomware groups maintain a steady rhythm of victim announcements across dark web leak sites and threat intelligence feeds. According to recent monitoring data, new claims attributed to the ransomware group “Qilin” and another actor identified as “APT73” have surfaced, listing additional organizations as compromised targets.