2 mentions in 7 days · 2 in 30 days · 2 total · first seen · last
A new Galago ransomware operation linked to Panzer group, but no confirmed intrusion or victims published yet.
A new Galago ransomware operation claims partnership with Panzer group, but no confirmed intrusion or victims have been published; the incident remains unverified.
Galago ransomware, linked to Panzer, allegedly stole 105 GB from Icelandic healthcare firm Inter ehf; its leak site is inactive.
A new ransomware brand called Galago publicly claims a partnership with the Panzer extortion group. Its Tor leak site, monitored from 15 September 2026, was inactive and listed no victims, but the domain uses the same pnzr prefix as Panzer's site. Panzer published 32 alleged victims between 5 August and 23 September 2026. An unconfirmed 9 September report alleged Galago took about 105 GB from Icelandic healthcare organization Inter ehf, with a possible publication window around 28-29 September; no encryption or data publication has been independently verified.