sekhmet is a ransomware operator no longer publishing new disclosures. Darkfield has indexed 2 public victims claimed by this operator between May 30, 2020 and June 20, 2020. Sekhmet is a relatively obscure ransomware group that emerged in May 2020, primarily motivated by financial gain through targeted attacks against critical infrastructure sectors. The group's origin and affiliations remain largely undocumented in public threat intelligence reports, with limited information available about whether they operate independently or as part of a ransomware-as-a-service model. Based on available data, Sekhmet has demonstrated a preference for targeting organizations in the United States, with documented attacks against entities in the information technology and energy sectors, though their specific attack methodologies, initial access vectors, and encryption techniques have not been extensively detailed in public security research. The group's limited public profile is reflected in their small number of documented victims, with only two confirmed cases reported in open-source intelligence. Sekhmet's current operational status remains unclear due to the scarcity of recent public reporting on their activities, making it difficult to determine whether the group remains active, has ceased operations, or potentially rebranded under a different name.

Recent disclosures by sekhmet

All 2 indexed disclosures. Click any row for the full per-victim dossier.

• SilPacEnergy · United States · June 20, 2020
• ExcisInformation Technology · May 30, 2020

See every disclosure indexed for sekhmet →