D1R Ransomware
Tracked since Jul 13, 2026
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
D1R Claims Synopsys and Bosch Breaches, but Synopsys Disputes Intrusion
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Tactics and techniques (MITRE ATT&CK)
Initial Access
T1078 Valid AccountsT1190 Exploit Public-Facing Application Persistence
T1078 Valid Accounts Privilege Escalation
T1078 Valid Accounts Stealth
T1078 Valid Accounts Credential Access
T1111 Multi-Factor Authentication InterceptionT1649 Steal or Forge Authentication Certificates Collection
T1213 Data from Information RepositoriesT1530 Data from Cloud Storage Exfiltration
T1020 Automated ExfiltrationT1041 Exfiltration Over C2 ChannelT1048 Exfiltration Over Alternative ProtocolT1567 Exfiltration Over Web Service Impact
T1486 Data Encrypted for ImpactT1657 Financial Theft Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live