Data by ransomware.live

emperador

Profile source: Mallory

Operational record

Recent claims

Electrolux & Ontrac

Manufacturing

OnTrac

US / Transportation

RECEITA FEDERAL DO BRASIL

BR / Government & Defense

Alabama Woman's Health Care

US / Healthcare

Studio Notarile Associato Salvatore Costantino E Anna Favarato

IT / Professional Services

Exploited software

Vulnerabilities linked to emperador

5 CVEs

CVE-2026-50751 Check Point Security Gateway (IKEv1 improper auth) - CRITICAL - CVSS 9.3 CVE-2026-48027 Nx Nx Console (embedded malicious code) - CRITICAL - CVSS 9.3 CVE-2023-21529 Microsoft Exchange (deserialization) - HIGH - CVSS 8.8 CVE-2024-1708 ConnectWise ScreenConnect (path traversal -> RCE) - HIGH - CVSS 8.4 CVE-2025-60710 Microsoft Windows (link following) - HIGH - CVSS 7.8

MITRE ATT&CK

emperador in ATT&CK

2 distinct techniques

Techniques

2 techniques

T1567 Exfiltration Over Web Service T1486 Data Encrypted for Impact

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage IPinfo urlscan.io Mallory eCrime.ch ransomware.live