# MMCC listed as ransomware victim on payoutsking

Published: 2026-10-04 · Severity: routine
Canonical: https://vorant.io/reports/6db87469-c87e-5bbd-869c-9c2b42bae219/mmcc-listed-as-ransomware-victim-on-payoutsking

> A victim listing on ransomware operator payoutsking site; insufficient detail for defender action.

Ransomware.live reports a victim listing attributed to MMCC on the payoutsking ransomware operator leak site. The article provides no substantive detail on the attack vector, exploitation method, affected systems, or timeline. This appears to be a routine victim listing indexed from public ransomware leak sites rather than analysis of a specific incident. Defenders cannot determine affected assets, vulnerability details, or containment requirements from this source.

## Mentioned in this report

- Threat actors: Payouts King
- Malware: Payouts King

Source reporting: https://www.ransomware.live/id/TSoqKipDQHBheW91dHNraW5n

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/6db87469-c87e-5bbd-869c-9c2b42bae219/mmcc-listed-as-ransomware-victim-on-payoutsking.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup
