EudorIACyber Intelligence
Operational monitoring Newsletter IT EN
← Threat actor database
Threat actor profile

play

Defensive profile aggregated solely from the catalogued evidence. Associations reflect the sources and are not independent EudorIA attribution.

Evidence status
observed
First observation
Not available
Last observation
22/09/2026
Correlated signals
20
Observed picture

What the sources describe

RansomLook indicizza una pubblicazione attribuita a play: Metallco. La segnalazione è OSINT e non costituisce conferma indipendente dell'incidente.

RansomLook indicizza una pubblicazione attribuita a play: Hurley. La segnalazione è OSINT e non costituisce conferma indipendente dell'incidente.

Indice OSINT pubblico: Metallco viene associata al gruppo play. La segnalazione non e stata verificata da EudorIA e non equivale alla conferma di un incidente.

AliasesNot catalogued
RansomwareNot documented
MalwareNot documented
Named targetsBR, US, CA, IE, RS, DE, LV, GB, IT, ES
Modus operandi

Observed methods and techniques

0 structured pieces of evidence
Profile to enrich

The available sources do not yet describe sufficiently structured methods.

Risk reduction

How to prepare the defence

Controls linked to the evidence

The sources contain no explicit defensive guidance. The services below are deterministically correlated to the catalogued TTPs, not generated as claims about the actor.

EudorIA

Security Assessment

Verifica esposizione, configurazioni e priorita di remediation prima che una tecnica osservata diventi un incidente.

Approfondisci il servizio →
EudorIA

SOC as a Service

Monitora le evidenze, correla gli indicatori e coordina triage, escalation e risposta agli incidenti.

Approfondisci il servizio →

The measures listed reduce likelihood and impact but do not guarantee the absolute prevention of an attack.

Tor intelligence

Catalogued onion sources

0

No onion source associated with this group.

Evidence trail

Linked observations

Last 20
DateSignalTypeConfidence
22/09/2026RansomLook: play - Metallcoransomwareunverified_osint_claim
22/09/2026RansomLook: play - Hurleyransomwareunverified_osint_claim
22/09/2026Segnalazione ransomware: Metallcoransomwareunverified_osint_claim
22/09/2026Segnalazione ransomware: Hurleyransomwareunverified_osint_claim
19/09/2026RansomLook: play - Vista Plastic Solutionsransomwareunverified_osint_claim
19/09/2026RansomLook: play - Inglewood Golfransomwareunverified_osint_claim
19/09/2026RansomLook: play - Barrett Mahony Consulting Engineersransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Vista Plastic Solutionsransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Inglewood Golfransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Barrett Mahony Consulting Engineersransomwareunverified_osint_claim
10/09/2026RansomLook: play - Sys-koolransomwareunverified_osint_claim
10/09/2026RansomLook: play - Grunthal Welding & Suppliesransomwareunverified_osint_claim
10/09/2026Segnalazione ransomware: Sys-koolransomwareunverified_osint_claim
10/09/2026Segnalazione ransomware: Grunthal Welding & Suppliesransomwareunverified_osint_claim
09/09/2026RansomLook: play - Red Star Oilransomwareunverified_osint_claim
09/09/2026RansomLook: play - GT Distributorsransomwareunverified_osint_claim
08/09/2026Segnalazione ransomware: Red Star Oilransomwareunverified_osint_claim
08/09/2026Segnalazione ransomware: GT Distributorsransomwareunverified_osint_claim
31/08/2026RansomLook: play - MEQransomwareunverified_osint_claim
31/08/2026RansomLook: play - Figgins Family Wine Estatesransomwareunverified_osint_claim