D1R Claims Access to ARM Through 2FA Bypass
Summary
D1R claims it used leaked Synopsys information and cross-referenced leaks to access ARM, then used Athena Download Manager to bypass some 2FA checks. The claims are unconfirmed and monitored by ransomware.live.
Key points
- The post attributes the claims to D1R and names ARM as the victim; it says the information comes from public claims by the group.
- D1R claims leaked Synopsys database information and other group leaks helped it gain access to ARM-related systems.
- The group claims Athena Download Manager, requiring a certificate associated with a company that owns ARM products, enabled downloads while bypassing some checks used at www[.]arm[.]com.
- The post does not independently confirm the claims; it invites an official statement from ARM.
Article Details
- Victim
- ARM
- Victim Domain
- www.arm.com
- Claim Date
- 2026-07-13
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Claimed, unverified
- Exfiltrated Data
- D1R claims it accessed ARM-associated sources and downloaded Athena Download Manager and other files; the article says the claims could not be confirmed.
- Exfiltrated Size
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- No publication of ARM victim data is reported; the article publishes D1R's unverified claims.
Threat Actors
Vendors
ArmThe D1R threat actor D1R, targeting ARM in GB, exploited leaked Synopsys database information and cross-referenced other group leaks to gain access and investigate remotely, later using Athena Download Manager—requiringSynopsysThe D1R threat actor D1R, targeting ARM in GB, exploited leaked Synopsys database information and cross-referenced other group leaks to gain access and investigate remotely, later using Athena Download Manager—requiring