Eclipse is a cybercriminal group known for ransomware and double extortion operations primarily targeting organizations in Singapore.
Eclipse is a cybercriminal group conducting active ransomware and extortion operations. It primarily targets organizations in Singapore, though specific victim sectors are not publicly identified. The group employs double extortion TTPs, exfiltrating data and threatening to publish it on a public leak site. Defenders should monitor for data exfiltration anomalies and ensure robust offline backup strategies to mitigate ransomware impact.
Eclipse is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
The Eclipse group primarily targets organizations in Singapore.
The Eclipse group uses double extortion TTPs, exfiltrating data and threatening to publish it on a public leak site.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.