THREATOPS
THREAT OPS › Threat News › [blacknevas] Optimum First Mortgage (Pear's acting group's promotional blog) posted to leak site

[blacknevas] Optimum First Mortgage (Pear's acting group's promotional blog) posted to leak site

medransomware_livePublished 2026-09-16

Ransomware group: blacknevas Victim: Optimum First Mortgage (Pear's acting group's promotional blog) Victim website: n/a Sector: Financial Services Country: n/a Discovered: 2026-09-16T19:54:07.070553+00:00 Leak-site post: http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion/d7ba2a3f-0d92-4bc9-b30d-6f0edbeaf54b Description: Industry: Finance Lending & BrokerageLocation: USA&nbs

Indicators of compromise

Original source: http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion/d7ba2a3f-0d92-4bc9-b30d-6f0edbeaf54b