Everest Ransomware Activity in the UAE
Everest has claimed 9 organisations in the United Arab Emirates, which is 8% of all attributed UAE claims. Its activity concentrates in Government and Defense, accounting for 3 of those claims. The first Everest claim against a UAE organisation was recorded on , the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. This page counts Everest claims only. How this data is collected and filtered.
Which UAE sectors Everest targets
| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| Government and Defense | 3 | 33.3% | |
| Retail and E-Commerce | 2 | 22.2% | |
| Transportation | 2 | 22.2% | |
| Professional Services | 1 | 11.1% | |
| Hospitality | 1 | 11.1% | |
| Total | 9 | 100% |
When Everest claimed UAE organisations
Everest claimed 6 UAE organisations in 2025 alone, the highest single-year total of any group on this tracker, after appearing for the first time that May.
Everest has claimed 9 UAE organisations since May 2025
Everest ranks third of 47 groups on this tracker and appears across 5 distinct sectors. It reached that position from a standing start. The group had no UAE record at all before May 2025.
Everest went from absent to third place in under eighteen months
Leak-site monitoring recorded the first Everest claim against a UAE organisation on 8 May 2025. The group had claimed nothing in the UAE before that date. It then claimed 6 organisations during 2025 and 3 more in 2026.
Those 6 claims in a single year are the highest annual total of any group here. LockBit 3.0 leads the overall table with 10 claims, so Everest sits 1 claim behind second place.
Government and Defense absorbed 3 of the 9 claims. Retail and E-Commerce and Transportation follow with 2 each, and Professional Services and Hospitality carry 1 each. The most recent claim was recorded on 6 October 2026.
What this means for UAE organisations
- Assume that a group absent from your sector last year can lead it this year, because Everest did exactly that.
- Note the concentration in Government and Defense, which carries 3 of the 9 claims.
- Confirm whether DESC ISR v3 applies to you, either directly as a Dubai entity or through a government supply contract.
- Map your estate against the 13 control domains of DESC ISR v3 where that applies.
- Work through the 39 Priority One controls in UAE IAS v2 if you fall inside critical national infrastructure.
- Avoid building controls around a named operation, given how completely the leading names have turned over since 2024.
- Use the sector pages instead when deciding where to spend, since sectors persist while groups do not.
Everest reached the top three in seventeen months. Track this page rather than a static threat list.