Panzer is a ransomware/extortion group known for data theft alongside encryption.
Panzer is a ransomware/extortion group that conducts data theft alongside encryption. It targets a wide range of sectors including Manufacturing, Technology, Government & Defense, Energy & Utilities, and Education, focusing on victims in countries such as Thailand, South Korea, Spain, Italy, Czechia, Germany, Nigeria, Indonesia, and Switzerland. The group applies pressure by publishing victim information on its public leak site. Defenders should focus on monitoring network perimeters, maintaining robust offline backups of critical data, and tracking ransomware leak sites to check for potentially exposed credentials.
Panzer is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
The Panzer group targets victims in Thailand, South Korea, Spain, Italy, Czechia, Germany, Nigeria, Indonesia, and Switzerland.
Defenders should focus on monitoring network perimeters, maintaining offline backups of critical data, and tracking ransomware leak sites to check for potentially exposed credentials.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.