Stormous Ransomware Activity in the UAE
Stormous has claimed 10 organisations in the United Arab Emirates, which is 8.9% of all attributed UAE claims. Its activity concentrates in Government and Defense, accounting for 3 of those claims. The first Stormous claim against a UAE organisation was recorded on , the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. This page counts Stormous claims only. How this data is collected and filtered.
Which UAE sectors Stormous targets
| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| Government and Defense | 3 | 30% | |
| Financial Services | 3 | 30% | |
| Retail and E-Commerce | 2 | 20% | |
| Professional Services | 1 | 10% | |
| Technology | 1 | 10% | |
| Total | 10 | 100% |
When Stormous claimed UAE organisations
Stormous has claimed 10 UAE organisations across five sectors, with a full year of silence in 2025 between active periods.
Stormous has claimed 10 UAE organisations
Stormous ranks second of 47 groups on this tracker and appears across 5 distinct sectors. The shape of its record matters more than its rank. The group recorded a full year of silence between two active periods, which few operations here do.
Stormous recorded nothing in 2025, then returned in 2026
Leak-site monitoring recorded the first Stormous claim against a UAE organisation on 25 April 2022. The most recent was recorded on 11 May 2026. The group claimed 1 organisation in the 2020 to 2022 period, then 2 in 2023 and 5 in 2024. It claimed none in 2025, then 2 in 2026.
That gap is unusual among the groups on this tracker. Most operations here either stop entirely or run continuously. A dormant year followed by a return carries a lesson. An absence in the latest period does not mean a group has left.
Government and Defense and Financial Services each account for 3 claims. Retail and E-Commerce follows with 2, and the remaining 2 fall in other sectors.
What this means for UAE organisations
- Treat a quiet year as no evidence that a group has stopped, because Stormous returned after claiming nothing in 2025.
- Note that its 5 claims in 2024 made it the leading group of that period.
- Watch Government and Defense and Financial Services in particular, since each carries 3 of the claims on record.
- Establish whether DESC ISR v3 reaches you, given that Government and Defense is one of the two sectors this group concentrates on.
- Work through the 39 Priority One controls in UAE IAS v2 if you sit inside critical national infrastructure.
- Compare this page against the sector pages, because a group profile describes who claimed and a sector page describes who was claimed.
- Revisit this page as 2026 completes, since the year is partial and the count may still move.