Threat Actor

DevMan

Properties

summary
Operators of the DevMan ransomware-as-a-service scheme maintain a dedicated web portal allowing affiliates to build payloads, manage victims, and oversee earnings.
first_seen
2026-07-27T04:00:26.959997+00:00
last_seen
2026-07-27T04:00:26.959997+00:00
created_at
2026-07-27T04:00:26.959997+00:00
mention_count
1
evidence_url
https://thehackernews.com/2026/07/devman-raas-portal-centralizes-payload.html
target
unknown
provenance
news-scan
scan_confidence
0.75
suspected_origin
unknown
status
pending

Explore this actor's full graph with Ninja Signal

DevMan — Threat Actor Profile — Ninja Signal | Ninja Signal