Threat Group Profile
m3rx
● Active — last 30 days
Victim claims
26
First seen
Apr 2026
Last activity
11 Jun 2026
Tracked since
—
Group overview
M3rx is a small ransomware group first observed in 2025, using AES-CTR/AES-GCM encryption and targeting organizations in England, the US, Australia, Germany, Italy, and Switzerland, with around eight claimed victims including a Sydney-based property firm.
Preferred targets
Consumer Services · 6
Business Services · 6
Technology · 5
Manufacturing · 1
Transportation/Logistics · 1
Healthcare · 1
Most targeted countries
US · 5
CA · 3
DE · 3
GB · 3
AU · 2
IT · 2
