Benzona is a financially motivated ransomware group that emerged in late November 2025, operating under a double-extortion model. The group distinguishes itself by encrypting victim files and exfiltrating sensitive data, threatening to publish this information on a dedicated Tor-based leak site if ransom demands are not met. They primarily target small to mid-sized organizations across various sectors, demonstrating a coordinated approach in simultaneous attacks against multiple related entities. The group is known solely as Benzona in public reporting, with no widely reported aliases or confusion with other threat actors.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker