RunSomeWares is a ransomware group that emerged in February 2025 targeting supply-chain and financial sectors.
RunSomeWares is a newly surfaced ransomware group that emerged in February 2025. It primarily targets supply-chain services, financial services, accounting, and manufacturing. Their TTPs involve either encryption or pure data-theft extortion, though the exact methodology remains unclear. Defenders in these sectors should focus on data exfiltration monitoring and be prepared for potential encryption anomalies on critical systems.
RunSomeWares is an emerging ransomware group that surfaced in February 2025 with initial victims across supply-chain services, financial services, accounting, and manufacturing, with unclear deployment of an encryptor vs. pure data-theft extortion.
RunSomeWares primarily targets supply-chain services, financial services, accounting, and manufacturing.
The RunSomeWares group's tactic involves either encryption or pure data-theft extortion, though the exact methodology remains unclear.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.