Actor Profile

🏹 ALP-001 — Ransomware

⚠️ The group appears unreliable. Most, if not all, of its alleged victims cannot be verified. WE HAVE DECIDED TO REMOVE ENTRIES FOR THIS GROUP

🔄 Pivot:🌎 US 🏹 ALP-001

Classification

Ransomware

Leak-site victims

Ransomware.live

Associated IoCs

local intel

MITRE techniques

—

ATT&CK

Tracked

Yes

Ransomware.live

PIVOT🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🔥 Leak-Site Victims (17)

Victim	Country	Published	Domain
inatech.com	GB	2026-04-08T18:47:25.854369+00:00	`inatech.com`
nepgroup.com	US	2026-04-08T18:46:34.617105+00:00	`nepgroup.com`
aviwest.com	FR	2026-04-08T18:45:58.980022+00:00	`aviwest.com`
artmotion.net	CH	2026-04-03T10:35:58.433037+00:00	`artmotion.net`
asseco-ce.com	PL	2026-04-03T10:35:08.283527+00:00	`asseco-ce.com`
iliad.fr	FR	2026-03-30T12:50:57.067639+00:00	`iliad.fr`
knewin.com	BR	2026-03-30T00:50:47.945996+00:00	`knewin.com`
polsat.pl	PL	2026-03-29T01:40:21.080472+00:00	`polsat.pl`
lacor.es	ES	2026-03-29T01:39:38.184881+00:00	`lacor.es`
kob.com	US	2026-03-29T01:38:31.222681+00:00	`kob.com`
terix.com	US	2026-03-28T13:20:38.283967+00:00	`terix.com`
esprinet.com	IT	2026-03-25T20:28:03.835950+00:00	`esprinet.com`
hikvision.com	CN	2026-03-21T18:05:39.892402+00:00	`hikvision.com`
pellenc.com	FR	2026-03-22T18:47:09.584195+00:00	`pellenc.com`
kyoceradocumentsolutions.eu	NL	2026-03-29T01:38:55.694202+00:00	`kyoceradocumentsolutions.eu`
jaxa.jp	JP	2026-03-26T22:53:48.612552+00:00	`jaxa.jp`
irco.com	US	2026-03-21T18:05:03.617774+00:00	`irco.com`

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

📁 Case Management

Attach to case

Role

+ New case from this

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🏹 Add to case

Attach ALP-001 (Actor / APT) and pull all linked entities: pull linked

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →

Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook