Actor Profile

🏹 ULose — Ransomware

🔄 Pivot:🌎 KR 🏹 ULose

Classification

Ransomware

Leak-site victims

Ransomware.live

Associated IoCs

local intel

MITRE techniques

—

ATT&CK

Tracked

Yes

Ransomware.live

PIVOT🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🔥 Leak-Site Victims (5)

Victim	Country	Published	Domain
KyungRok	KR	2026-06-09T00:00:00+00:00	`kyungrok.com`
NRCapital	KR	2026-06-09T00:00:00+00:00	`nrcapital.co.kr`
MSICapital	KR	2026-06-09T00:00:00+00:00	`money-store.co.kr`
HanDok	KR	2026-06-09T00:00:00+00:00	`www.handok.co.kr`
HIZE Aero	KR	2026-06-09T00:00:00+00:00	`hizeaero.com`

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →

Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🏹 ULose — Ransomware

Classification

Leak-site victims

Associated IoCs

MITRE techniques

Tracked

🔥 Leak-Site Victims (5)

🏹 Campaigns & malware

🗃 Data Management

🧩 Advanced Capabilities

🧭 Intelligence disciplines

🤖 AI Copilot

⚡ AI Skills

🔍 Lookup & Enrich

📚 Docs & Reports

💡 Recommendations

⚙ Automation

📜 Playbook

🔗 Related Tools