CM
CMRansomware victim intelligence profile · Ranked #119 globally · Updated: Sep 23, 2026
ThreatAI Analysis
Compiled from this database and the ransomware.live profiles of the groups active in CM. Figures are computed from the tracked records, not inferred.
CM in the global picture
CM accounts for 4 of the ransomware disclosures tracked here, ranking #119 worldwide and making up 0% of the global total. The sectors listed most often are Financial Services, Technology, Public Sector.
Who is most active in CM
Spacebears — 2 victims in CM. Worldleaks — 1 victims in CM. Fog — 1 victims in CM. Fog, which uses the .flocked extension for encrypted files, was first observed in May in campaigns by Storm-0844, a threat actor known for distributing Akira.
Ransomware Threat Profile: CM
CM ranks #119 globally for ransomware attacks, with 4 confirmed victims in this database — representing 0% of the worldwide total. The most active ransomware groups targeting CM include Spacebears, Worldleaks, Fog.
The most frequently targeted industries in CM are Financial Services, Technology, Public Sector. These sectors are attractive to ransomware operators due to the sensitive data they hold and the critical nature of their operations.
CM's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in CM should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in CM (showing 4 of 4)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | Turbosoft | Spacebears | Technology | Jul 13, 2026 |
| 2 | ASCOMA Cameroon | Worldleaks | Financial Services | May 31, 2025 |
| 3 | Chanas Assurances S.A. (chanasassurances.com) | Fog | Financial Services | Nov 28, 2024 |
| 4 | CNPS Cameroun | Spacebears | Public Sector | Sep 12, 2024 |
Frequently Asked Questions
How many ransomware attacks have occurred in CM?
CM has recorded 4 ransomware victim disclosures in this database, ranking #119 globally. This represents 0% of all tracked ransomware attacks worldwide.
Which ransomware groups target CM?
The ransomware groups most active in CM are Spacebears, Worldleaks, Fog. These groups collectively account for the majority of victim disclosures attributed to CM.
Which industries are most targeted by ransomware in CM?
In CM, the most frequently targeted sectors are Financial Services, Technology, Public Sector. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does CM rank globally for ransomware attacks?
CM ranks #119 globally for ransomware attacks with 4 victim disclosures, representing 0% of the worldwide total of 21,844 tracked victims.
How can organisations in CM protect against ransomware?
Organisations in CM should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting CM is also recommended.