Bert
BERT is a newly emerged ransomware group first identified in mid-2025, targeting Windows and Linux platforms across healthcare, technology, and event services sectors in Asia, Europe, and the US, with ransomware derived from a Linux variant of REvil using AES encryption and multi-threaded file locking.
Victims
7
First Discovered
2025-04-06
victim
Last Discovered
2025-06-10
victim
Inactive Since
336
days
Avg Delay
2
days
Infostealer
14.3%
victims with domain
Countries
6
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
BERT | No | 2026-04-28T07:22:42 |
bertblogsoqmm4ow7nqyh5ik7etsmefdbf25stauecytvwy7tkgizhad.onion
|
Target
Top 5 Activity Sectors
- Technology 3
- Transportation/Logistics 1
- Construction 1
- Healthcare 1
- Business Services 1
Top 5 Countries
-
United States
2
-
United Kingdom
1
-
Colombia
1
-
Malaysia
1
-
Taiwan, Province of China
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (12)
Hash MD5
9
IP Address
2
session
1
Victims (7)
S5 Agency World is a global port agency operating in over 360 ports, specializing in vessel and carg…
Columbia Integração delivers IT solutions in cloud, cybersecurity, and infrastructure to drive digit…
Wawasan Dengkil Sdn Bhd is a Malaysian construction company founded in 2003. It specializes in earth…
All Ring Tech is a Taiwanese company producing advanced automation equipment for semiconductors, LED…
SIMCO Electronics is a leading provider of calibration and software solutions for technology compani…
Modern hospital in Yozgat offering quality care and innovation. Patient health is protected — their …
