RANSOMWARE VICTIMDUPLICATE CLAIM

A A Al Moosa Enterprises (ARENCO Group)

payload📍 UAE (AE)📅 March 28, 2026
8
same group

Attack Intelligence

A A Al Moosa Enterprises (ARENCO Group) was compromised in a ransomware attack attributed to payload in March 2026. The organization, operating in an undisclosed sector in UAE, was added to the group's data leak site as part of an extortion campaign.

payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

A.A. Al Moosa Enterprises, also known as ARENCO Group, is a diversified conglomerate based in Dubai, with interests spanning architectural and engineering consulting, real estate, hospitality, car rentals, manufacturing, and interior design. Established in 1971, the group has grown into one of the top family-owned business groups in Dubai, focusing on quality, service, and innovation.

Additional Details

data_size
40 GB

Other Victims — payload (8)

Quick Facts

CountryUAE (AE)
Attack DateMar 28, 2026
Intel Sourceransomlook
StatusDUPLICATE CLAIM

Threat Group

payload
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.