THREAT OPS › Threat News › [interlock] NFM Lending posted to leak site
[interlock] NFM Lending posted to leak site
Ransomware group: interlock Victim: NFM Lending Victim website: n/a Sector: Financial Services Country: US Discovered: 2026-09-07T15:31:55.699100+00:00 Leak-site post: http://gpotnbhakwdnrcojjnr4msl3sl64a4gv2n4yizvmbsceiazpqq23s5yd.onion/index.php?p= Description: NFM Lending is a national mortgage lender with over 1,000 employees that originated approximately $7.15 billion in mortgages in the past
MITRE ATT&CK techniques
- Email AddressesT1589.002
Indicators of compromise
- http://gpotnbhakwdnrcojjnr4msl3sl64a4gv2n4yizvmbsceiazpqq23s5yd.onion/index.php?p=url