Payload is a ransomware group that first emerged in February 2026, rapidly expanding its victim base across multiple continents. The group's primary motivation is financial gain, achieved through double-extortion tactics where they encrypt victim data and threaten to publicly release stolen sensitive information if ransom demands are not met. What distinguishes Payload from other groups is its use of ChaCha20 encryption with a per-file Curve25519 Elliptic-curve Diffie–Hellman (ECDH) exchange, alongside aggressive anti-forensic measures to hinder detection and recovery efforts. The group leverages Tor onion sites for victim communication and data leak publication.

Aliases del actor

Pitty PandaG0011Paladin RATen análisis de amenzas

Actores similares

pirate-pandaactor · 1Pitty Pandaapt · 0Pirate Pandaapt · 0Aquatic Pandaactor · 1Mustang Pandaapt · 1APT27 (Emissary Panda)actor · 1Putter Pandaapt · 1Deep Pandaactor · 1anchor-pandaactor · 1aquatic-pandaactor · 1