Security Resilience

Threat actor · all actors

PLAY RansomwareMISP-fec32bbf criminal

aka PLAY Ransomware

Last updated: 2026-10-16

5attributed CVEs
0ATT&CK techniques
13.5IDF score (tooling uniqueness)
0exclusive CVEs
2019–2025years active

About this actor

Ransomware

How we know this

Data origin
MISP threat-actor galaxy Imported from the open-source MISP threat-actor galaxy.
Techniques
No ATT&CK techniques mapped.
Named victims
None on file.

Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty.

See how actor data is built for the full pipeline.

Activity timeline

2019: 1 CVE published120192020: 1 CVE published120202021: 2 KEV added220212022: 2 CVE published2022: 2 KEV added420222025: 1 CVE published2025: 1 KEV added22025
CVE publishedKEV added

Profile

CVERiskCVSSEPSSPublishedProducts
CVE-2020-12812 KEV9.99.80.49342020-07-24see CVE
CVE-2018-13379 KEV9.59.11.00002019-06-04see CVE
CVE-2022-41040 KEV9.28.80.99962022-10-03see CVE
CVE-2022-41082 KEV8.78.00.99972022-10-03see CVE
CVE-2024-57727 KEV8.57.50.96582025-01-15see CVE

No techniques attributed.

Co-occurring actors

Similar actors

Overlapping CVEs

Active in same years

Same category