cry0 is a ransomware-as-a-service (RaaS) operation that first emerged in March 2026, recruiting affiliates via underground forums. The group employs a payload written in Rust and leverages blockchain-based negotiation infrastructure, specifically the Internet Computer Protocol, to enhance its resilience against law enforcement disruption. A key characteristic of cry0 is its affiliate program, which offers a 90/10 revenue split. The group is distinct in its use of innovative communication methods designed to evade takedowns.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker