INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Thegentlemen Publishes New Victim Mann Group

| 2026-10-31 07:25 CRITICAL LOW RANSOMWARE & EXTORTION
Executive Summary
AI-generated
Mann Group, an Australian multi-disciplinary engineering and construction company with 350 employees, is the latest victim of a ransomware attack. The targeted sector appears to be energy, as Mann Group provides thermal, electrical, environmental and sanitary engineering solutions. The attackers are believed to have employed exfiltration tactics, which were also used in a recent ransomware operation published by Thegentlemen. This incident highlights the vulnerability of companies like Mann Group, which operate through eight subsidiaries including Mechtronic Engineering, providing services such as pipe fabrication, structural steel, and renewable energy systems. The attackers' malware payload is reported to be Solar, while DNS records were found for the victim's domain.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
SolarSolar
Target & Sectors
FIVE_EYES FIVE_EYES energyenergy maritimemaritime
Incident Timeline
‎2026/10/31
Threat actors published a new victim, Mann Group, on the platform.
victims 350 employees
organisation manngroup.com.au Mann Group
organisation Mechtronic Engineering
organisation Mann Group
organisation DNS
Tactical Metrics
Metrics
victims
350
Employees
Intelligence Sources