Skip to content
RansomwareFinancialIntermediate sophistication · Small team

Kelvinsecurity

Kelvinsecurity is a ransomware group with a financial motive, tracked by Brandefense. It targets the Government and Diplomacy sectors in Italy and Spain. It uses 2 MITRE ATT&CK techniques.

Techniques
2
Exploited CVEs
No CVE data
First seen
Jan 1, 2015
Last seen
Dec 31, 2022
Record updated

Who They Target.

Countries · 2
Labelsransomware

About Kelvinsecurity.

KelvinSecurity is a financially motivated hacking group active since at least 2015, primarily engaged in stealing and selling databases from telecommunications, healthcare, and political organizations worldwide, with notable breaches including Vodafone Italia and Frost & Sullivan; the group's leader was arrested by Spanish police.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.