M
Ms13-089
ActiveMs13089 also known as
Total victims
2
This month
0
Active
—
DayBreach AI intelligence
Loading…
How it operates
MS13089 is a newly emerged ransomware group (first observed December 2025) that named itself after a 2013 Microsoft Security Bulletin, claiming a handful of victims including a law firm, operating primarily as a double-extortion actor.
Targeted sectors
Retail & E-Commerce%100