Timc
| Active
TiMc is a ransomware group that emerged in early 2026, claiming high-impact attacks against Spanish IT services leader Seidor (1 TB+ data) and oncology organization Oncologica (100 GB+), targeting Business Services, Healthcare, and IT sectors with a focus on Spanish-speaking and European targets.
Victims
3
First Discovered
2026-04-09
victim
Last Discovered
2026-04-09
victim
Inactive Since
34
days
Avg Delay
N/A
attack→claim
Infostealer
33.3%
victims with domain
Countries
3
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Pixel Dashboard | Yes | 2026-05-13T20:05:40 | nginx 1.18.0 |
rzzfiwoop67jrxadngcy7nvjm7suwtrjznview63ooowqfsm5sq7gmqd.onion
|
Target
Top 5 Activity Sectors
- Healthcare 1
- Business Services 1
- Manufacturing 1
Top 5 Countries
-
United Kingdom
1
-
Spain
1
-
Argentina
1
Heatmap
YARA Rules (1)
Victims (3)
We breached into their intranet and have total control of it , with 1TB+ data exfiltrated including …
We've taken down their DC and FS, 100GB+ of the data including PII, Trade record and Full 20GB+ MySQ…