Threat Intelligence / Actor / Unknown (Sorry ransomware operator)

Unknown (Sorry ransomware operator)

1 tracked threat(s) · Categories: RANSOMWARE

Also known as: Sorry, Sorry ransomware operator, Sorry crew

Tracked threats

Sorry Ransomware Mass Exploitation of cPanel/WHM Authentication Bypass CVE-2026-41940 (44,000+ Servers Compromised) — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence