RANSOMWARE VICTIM
IRAN Job Seekers Platform
kazu📅 November 10, 2025
8
same group
Attack Intelligence
IRAN Job Seekers Platform was compromised in a ransomware attack attributed to kazu in November 2025. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.
kazu operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Job search portal based in Iran, designed to connect job seekers with employers through listings, announcements, and employment opportunities.
Other Victims — kazu (8)
zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics
US · Technology
Jan 2026
MyVete
ES · —
Jan 2026
ManageMyHealth - New Zealand
NZ · Healthcare
Dec 2025
Saudi Icon
SA · —
Dec 2025
Leadway Assurance
NG · Financial Services
Dec 2025
CT Dent Ltd
GB · Healthcare
Dec 2025
Zacatecas State Department of Education
—
Nov 2025
Ministry of Health – Government of Sri Lanka
—
Nov 2025
Quick Facts
Attack DateNov 10, 2025
Intel Sourceransomlook
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.