Exitium is a data extortion group that emerged in early March 2026, known for operating a Tor-based leak site and primarily focusing on bulk data exfiltration followed by public naming-and-shaming, rather than relying heavily on file encryption. This group is characterized by its "data-centric" approach, acting as a data broker where encryption is often a secondary or even absent component of their extortion tactics, as evidenced by only one of their initial five publicly claimed victims experiencing full encryption. The group's motivation is purely financial, and there is no public attribution to any specific origin country or known nation-state. They distinguish themselves by prioritizing the theft and exposure of sensitive data over the more traditional ransomware model of encrypting systems first.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker