EndZone

EndZone is a purported ransomware and data-extortion group associated with public claims of compromises affecting U.S. organizations, including AT&T and Accela. The group has claimed to possess sensitive data and threatened public disclosure in an apparent effort to compel victim engagement. Claims of the underlying intrusions, data theft, and attribution have not been independently corroborated.