THREAT OPS › Threat News › [play] GCATS Investments posted to leak site
[play] GCATS Investments posted to leak site
Ransomware group: play Victim: GCATS Investments Victim website: gcatstx.com Sector: Financial Services Country: US Discovered: 2026-08-06T19:56:18.866956+00:00 Leak-site post: http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion/topic.php?id=rSQ3WyESL5wR6 Description: United States Note: leak-site listings typically precede public disclosure.
Attributed threat actors
- PlayG1040
Indicators of compromise
- gcatstx.comdomain
- http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion/topic.php?id=rSQ3WyESL5wR6url