ulose
Intelligence Profile
ulose — tracked by MISP Galaxy (ransomware).
Intelligence Assessment
Ulose is a financially motivated ransomware operation. It is tracked by MISP Galaxy as ransomware.
Ulose has tracked 5 victims in total, all within the last 90 days.
Ulose appears to be currently active, with its last attack on 2026-06-09. There is no indication of its sophistication level.
Threat Analysis
ulose is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of financial.
Financially motivated threat actors like ulose prioritize monetary gain through methods such as ransomware deployment, banking trojans, cryptocurrency theft, BEC scams, or credential harvesting for resale on underground markets.
Ransomware Victims (10)
CTIWATCH tracks 10 organizations claimed as victims by ulose on its data leak site, with attack dates, sectors and countries.
View full victims list →