RansomwareFinancial
Lamashtu
Lamashtu is a ransomware group with a financial motive, tracked by Brandefense. It targets 7 sectors, including Manufacturing, and Transportation and Logistics, in 9 countries, including France and Germany.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Apr 11, 2026
- Last seen
- Jun 17, 2026
- Record updated
Who They Target.
About Lamashtu.
Lamashtu is an extortion group that first appeared in April 2026, claiming attacks against organizations in France, Romania, and Thailand across energy, pharmaceutical, and film sectors; it has not yet been confirmed as operating actual file-encrypting ransomware rather than pure data-theft extortion.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.