Kryptos is an emerging Ransomware-as-a-Service (RaaS) operation that first surfaced in October 2025, primarily focused on financial gain through data exfiltration and extortion against mid-sized organizations. The group demonstrated a rapid deployment strategy, claiming three victims within its initial day of activity. Operating through a dedicated dark web portal, Kryptos employs standard double-extortion tactics. A key characteristic that sets this group apart is its quick attack-to-claim cycle, averaging just one day between a breach and its public disclosure. The group primarily targets mid-sized firms with 250 to 1,200 employees, particularly in professional, technical, and legal service sectors.

Aliases del actor

KRYPOS LEAKSkryptos ransomware

Actores similares

worldleaksransomware · 167ValenciaLeaksransomware · 2donutleaksransomware · 2shaoleaksransomware · 2lockbit3ransomware · 2016qilinransomware · 1933akiraransomware · 1524playransomware · 1268clopransomware · 1254lockbit2ransomware · 1002