About Marsad Cyber
Marsad Cyber is an independent threat-data research project tracking ransomware activity against organisations in the United Arab Emirates. It currently tracks 112 attributed claims, updated daily from public leak-site monitoring.
What the project does
Public reporting on cyber incidents in the Gulf is fragmented. Regional figures are usually quoted without a source, a date or a method, and rarely distinguish an attacker's claim from a confirmed breach. This project publishes a narrow set of figures with all three attached: where the data came from, when it was collected, and how it was filtered.
Every number on this site traces to a dated snapshot held in version control. No figure is written by hand and none is estimated. The snapshot that drives the current pages was collected on from ransomware.live and holds 192 records, of which 112 carry a verifiable UAE link.
Observe
Leak-site claims published by ransomware groups are collected daily and screened for a verifiable link to the United Arab Emirates.
Filter in the open
Of 192 records the upstream feed tagged for the UAE, 112 survive the filter. The rule is published, not summarised.
Publish aggregates only
Figures are released by sector, group and period. No affected organisation is identified, in any form, anywhere on this site.
The name
Marsad is the Arabic word for observatory. The name describes the work directly: this site is an observation post, not an advisory service and not a news desk.
What it deliberately does not do
This site never identifies an organisation affected by ransomware. It does not republish leaked material, host leak-site addresses, or describe the contents of a breach. The reasoning, both legal and practical, is set out in full in the editorial policy.
It also does not offer certification against any regulatory framework, and it holds no accreditation from any UAE authority.
One rule above the rest
No affected organisation may be identifiable in anything this site publishes. The check runs inside the build: if a page could identify a victim, that page is never produced.
Who writes it
Data pages are assembled from source snapshots, then read and checked by hand before publication. Written analysis is published under Marsad Research Team. Corrections and data questions are welcome and are answered at the contact page.
See the methodology for how records become published figures, or read the ransomware tracker itself.