Skip to content
RansomwareFinancialExpert sophistication · Small team

Threeam

Threeam is a ransomware group with a financial motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 16 countries, including the United States and the United Kingdom. It uses 4 MITRE ATT&CK techniques.

Also known as
  • 3Am
Techniques
4
Exploited CVEs
No CVE data
First seen
Sep 14, 2023
Last seen
Aug 30, 2026
Record updated

Who They Target.

Labelsransomwarethreeam

About Threeam.

A new Ransomware family identified by the name '3AM' or 'ThreeAM' in September 2023. Source:.

Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.