Pdhellcat.rar «SAFE ⟶»
: Rar/Zip files are common containers for delivering the group's custom ransomware or auxiliary tools. Major 2025 Breaches Linked to Hellcat
The Hellcat group (formerly known as ICA Group) is led by threat actors using the aliases and Rey . They are known for "humiliation tactics," publicly pressuring victims on leak sites and demanding ransoms in various forms, including unconventional requests like "baguettes" (referring to a specific cryptocurrency or a sarcastic demand during the Schneider Electric breach). Technical Write-up Summary pdhellcat.rar
: Hellcat frequently leaks compressed datasets as "proof of breach." For example, they claimed a 40GB compressed breach of Schneider Electric . : Rar/Zip files are common containers for delivering
: Exfiltrated hundreds of gigabytes of source code and employee credentials. pdhellcat.rar