Babuk-Locker is a cybercrime group that emerged in early 2021 as a ransomware-as-a-service (RaaS) operation focusing on double extortion. The group gained notoriety by targeting large corporate and government entities, including the Washington D.C. Metropolitan Police Department. After internal conflict and the high-profile Washington D.C. attack, the original Babuk group announced its cessation of operations, and its complete source code was leaked in September 2021. This leak led to the proliferation of Babuk variants and offshoots, such as Babuk V2, used by other threat actors. A distinct copycat group, often referred to as Babuk2 or Babuk-Bjorka, emerged in early 2025, leveraging the Babuk name and frequently using recycled data from other breaches for re-extortion attempts. The original group is believed to be Russian-speaking, recruiting affiliates from Russian-speaking communities, and its primary motivation is financial gain through extortion.

Aliases del actor

SkyWaveBabuk2Vasa LockerBjorkaBabyk

Actores similares

babuk2ransomware · 180medusalockeractor · 26tridentlockerransomware · 6avoslockerransomware · 3chilelockerransomware · 3alphalockeractor · 3GDLockerSecransomware · 2adminlockerransomware · 2bluelockerransomware · 2dagonlockerransomware · 2