Skip to content
Cyber Threat
CTI Academy Sponsor CTI Academy
AE

Ransomware attacks in UAE

173 organisations in UAE have been listed on ransomware leak sites, ranking #18 worldwide. Updated .

Victims
173
0.7% of global total
Global rank
#18
of 180 countries
Active groups
58
Most: Everest
Sectors
21
Most: Business Services

ThreatAI analysis

Compiled from this database and the ransomware.live profiles of the groups active in UAE. Figures are computed from the tracked records, not inferred.

UAE sees 173 recorded victim cases from ransomware activity on a global rank of 18; most strikes come from groups like Everest and Coinbasecartel targeting sectors such as business services, technology, and transportation/logistics.

UAE in the global picture

UAE accounts for 173 of the ransomware disclosures tracked here, ranking #18 worldwide and making up 0.7% of the global total. The sectors listed most often are Business Services, Technology, Transportation/Logistics.

Who is most active in UAE

Everest — 12 victims in UAE. Everest ransom group collects and analyzes information about their victims. Coinbasecartel — 12 victims in UAE. CoinbaseCartel specializes in data acquisition through system access and strategic partnerships. Ransomhub — 12 victims in UAE. The group emerged in mid-February 2024 and has already listed several organizations as alleged victims of their attacks, resulting from extortion through encryption and data leaks.

Ransomware threat profile: UAE

UAE ranks #18 worldwide for ransomware disclosures, with 173 victims in this database — 0.7% of the global total. The groups listing the most organisations here are Everest, Coinbasecartel and Ransomhub.

The most frequently listed industries in UAE are Business Services, Technology, Transportation/Logistics. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.

The volume reflects UAE's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.

Victims in UAE 173

Page 1 of 2
Organization Disclosed
SkyWorld Air Cargo
Qilin
Amity University Dubai
Blacknevas
Admirals Trading
Auditteam
PMG Project Management Group
Nightspire
UAE Pro League
Incransom
Flydubai
Everest
Ad***ng
Auditteam
Ad***ng
Auditteam
noonsugar.com
M3rx
Abourametals
Medusalocker
Abourametals
Medusalocker
www.ibnsinatrust.com
Krybit
DiamondLease
Nightspire
DiamondLease
Nightspire
ahadandco.com
Braincipher
A&E + SMA Design
Qilin
Wozair
Dragonforce
Dubai Airport - ed
Nasirsecurity
UAE Customs (Federal Customs Authority) - ACCESS GRANTED !
Nasirsecurity
Almeer
Thegentlemen
AWJ Holding
Thegentlemen
MCT Group of Companies
Direwolf
nyklawfirm.com nyk.ae
Incransom
Al-Futtaim Group
Everest
Emirates Flight Catering
Everest
NIMR Oil
Everest
harwal.net
Incransom
Stratos Network
Global secret group
Midal Cables
Dragonforce
Navana Real Estate
Qilin
Inter Power Engineering
Qilin
Al Dhow Group
Thegentlemen
Dolrad
Medusalocker
Steegaa Interior
Thegentlemen
Al Khaja Holding
Thegentlemen
aasa.ae
Krybit
Al Ishrak Contracting
Dragonforce
Al Shafar GRC
Dragonforce
Corniche Hotel Abu Dhabi
Dragonforce
Meirc training and consulting
Incransom
arc-reins.com + fidelityunited.ae UPDATE-FULL DATA DUMP
Stormous
lalsgroup.com
Incransom
ROYAL M HOTEL BY GEWAN FUJAIRAH LLC
Lamashtu
arc-reins.com + fidelityunited.ae
Stormous
eworldme.com
Braincipher
amtaar.com
Apt73
moccae.gov.ae
Apt73
shj.ae
Apt73
El Ezh Building Contracting LLC
Gunra
Propertyfinder / PropSpace CRM - In aucitioin place your bids now !!!
Coinbasecartel
Straight Line Logistics
Everest
A A Al Moosa Enterprises (ARENCO Group)
Payload
AHMED MUBARAK DEBT COLLECTION
Dragonforce
Sharjah National Oil Corporation
Handala
Al Arif Contracting Co. (L.L.C)
Tengu
Zip24 - ShipOx
Cipherforce
secure.ae
Lynx
Autostrad Rent a Car
Thegentlemen
Emirates National Group
Thegentlemen
Marina Home Interiors
Thegentlemen
Abu Dhabi Indian School – Branch 1, Al Wathba
Nightspire
Sibca
Thegentlemen
Dubai Air Wing
Nova
gbmme.com
Incransom
Mohammad Omar Bin Haider Holding Group
Direwolf
soeuae.ae
Lockbit5
Arabian Escapes
Coinbasecartel
Betterhomes
Coinbasecartel
Coldwell Banker UAE
Coinbasecartel
Elysian Real Estate
Coinbasecartel
Harbor Real Estate
Coinbasecartel
Homes 4 Life
Coinbasecartel
Hunt & Harris Real Estate
Coinbasecartel
One Broker Group
Coinbasecartel
Savills Middle East/Cluttons
Coinbasecartel
DMC-ME.COM
Clop
Du
Dragonforce
FDC Interiors
Medusa
naffco.com
Incransom
Propertyfinder / PropSpace CRM
Coinbasecartel
Property Finder / PropSpace
Coinbasecartel
Dayal Metal Containers Factory LLC
Nightspire
alissco.com
Qilin
Trojan Construction & Holding Group
Blacknevas
Air Arabia
Everest
Al Rimal Group
Tengu
Gulf Warranties LLC
Blackshrantac
Adore UAE
Bqtlock
EPS FUJ Private School UAE
Bqtlock
Lux Actuaries & Consultants
Medusa
AX CAPITAL
Killsec
Accflex ERP
Arcusmedia
HappyTenant
Killsec
www.melenco.com
Incransom
Nathan And Nathan
Killsec
wfd2027uae.ae
Warlock
TransCore ITS, LLC
Crypto24
Department of Culture and Tourism Abu Dhabi - Download link
Everest
Ajmanre.gov.ae
Flocker
Department of Culture and Tourism Abu Dhabi - Full leak published
Everest
1–100 of 173

Frequently asked questions

How many ransomware attacks have occurred in UAE?

UAE has recorded 173 ransomware victim disclosures in this database, ranking #18 globally. This represents 0.7% of all tracked ransomware attacks worldwide.

Which ransomware groups target UAE?

The ransomware groups most active in UAE are Everest, Coinbasecartel, Ransomhub, Qilin. These groups collectively account for the majority of victim disclosures attributed to UAE.

Which industries are most targeted by ransomware in UAE?

In UAE, the most frequently targeted sectors are Business Services, Technology, Transportation/Logistics. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.

How does UAE rank globally for ransomware attacks?

UAE ranks #18 globally for ransomware attacks with 173 victim disclosures, representing 0.7% of the worldwide total of 23,585 tracked victims.

How can organisations in UAE protect against ransomware?

Organisations in UAE should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting UAE is also recommended.