Hellcat
Hellcat is a ransomware group with a financial motive, tracked by Brandefense. It targets 7 sectors, including Government and Technology, in 7 countries, including the United States and Indonesia.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Nov 1, 2024
- Last seen
- Jan 28, 2025
- Record updated
Who They Target.
Sectors · 7
Labelsbd:governance:curation:analyst-reviewedransomware
About Hellcat.
HellCat is a ransomware-as-a-service group that formed in Q4 2024 and quickly became notable for high-profile attacks against Schneider Electric, Telefónica, and Israel's Knesset, primarily gaining initial access via stolen Jira credentials harvested by infostealer malware, targeting critical infrastructure and government entities.
Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.