← threat actors
threat actor
Whitearmor
also tracked as whitarmor 1
2 stories · 0 in the wild · October 25, 2026 – November 8, 2026
evidence: 2 claimed
sectors
- transport 1 · Nov 8
- manufacturing 1 · Oct 25
geography
- malaysia 1 · Oct 25
- singapore 1 · Oct 25
what we reported, newest first, grouped by story
November 8, 2026
- WhiteArmor claims 100 GB of data tied to Maersk’s OCF/LF Logistics platform. The ransomware group is demanding $5 million and claims the material includes driver and staff records, plaintext passwords and logistics data, according to Dark Web Informer. No company confirmation accompanies the leak-site claim.
· Nov 8 · claimed · Threat Activity & Operations
October 25, 2026
- WhiteArmor listed Hisense on its leak site, claiming a warranty-claims archive tied to Malaysia and Singapore operations, linked customer IDs, and records on roughly 2,500 suppliers, with a $500,000 demand and a late-November deadline. Same group behind the Whirlpool and J.B. Hunt claims. Unverified; Hisense has not confirmed an incident. (DailyDarkWeb, FalconFeeds)
· Oct 25 · claimed · as whitarmor · Threat Activity