THREAT OPS › Threat News › [play] Sorter Construction — ransomware leak-site post
[play] Sorter Construction — ransomware leak-site post
Ransomware group: play Victim (as posted on leak site): Sorter Construction Discovered: 2025-06-03 22:35:47.952590 Source: ransomwatch leak-site monitor Note: leak-site listings typically precede public disclosure.
Attributed threat actors
- PlayG1040
Original source: https://github.com/joshhighet/ransomwatch