Krybit is a ransomware-as-a-service (RaaS) group that first emerged in late March 2026, operating an affiliate model where threat actors receive 80% of ransom proceeds for deploying the ransomware. The group is financially motivated, demanding ransoms between $40,000 and $100,000. Krybit gained notoriety for its public conflict with the rival ransomware group 0APT in April 2026, during which both groups breached and leaked each other's internal operational data and infrastructure details. Although initially accused of fabricating victim claims, Krybit has been confirmed to have compromised at least 13 organizations across more than ten countries with actual stolen data. The group provides RaaS kits capable of encrypting Windows, Linux, ESXi, and Network Attached Storage (NAS) devices.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker