IMNCrew Ransomware
Tracked since May 5, 2025
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
IMN Crew is a data extortion and ransomware group that emerged in late March 2025, primarily targeting financial services organizations in the US, Croatia, and Indonesia by exploiting exposed perimeter services such as firewalls and VPNs, claiming at least five victims.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Credential Theft
LaZagne
Exfiltration
Restic
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live