Bert
BERT is a newly emerged ransomware group first identified in mid-2025, targeting Windows and Linux platforms across healthcare, technology, and event services sectors in Asia, Europe, and the US, with ransomware derived from a Linux variant of REvil using AES encryption and multi-threaded file locking.
Victims
7
First Victim
2025-04-04
(est. attack date)
Discovery Date
2025-04-06
Last Seen
2025-06-10
Inactive Since
1yr
more than
Avg Delay
2
days
Infostealer
28.6%
victims with domain
Countries
6
hit
Uptime
0.0% avg (30d)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
BERT | No | 2026-08-22T08:31:36 |
bertblogsoqmm4ow7nqyh5ik7etsmefdbf25stauecytvwy7tkgizhad.onion
|
Target
Top 5 Activity Sectors
- Technology 3
- Transportation 1
- Other 1
- Healthcare 1
- Professional Services 1
Top 5 Countries
-
United States
2
-
United Kingdom
1
-
Colombia
1
-
Malaysia
1
-
Taiwan, Province of China
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (12)
Hash MD5
9
IP Address
2
Session
1
Victims (7)
S5 Agency World is a global port agency operating in over 360 ports, specializing in vessel and carg…
Columbia Integração delivers IT solutions in cloud, cybersecurity, and infrastructure to drive digit…
Wawasan Dengkil Sdn Bhd is a Malaysian construction company founded in 2003. It specializes in earth…
All Ring Tech is a Taiwanese company producing advanced automation equipment for semiconductors, LED…
SIMCO Electronics is a leading provider of calibration and software solutions for technology compani…
Modern hospital in Yozgat offering quality care and innovation. Patient health is protected — their …
