Active ransomware operator
← All groupskrybit
31 victims indexed · first seen 2 months ago · last activity 2 days ago
At a glance
- Status
- active
- First seen
- 2 months ago
- Last activity
- 2 days ago
- Onion sites
- 4 known endpoints
- Primary sector
- Not Found · 2 hits
About
References
1 linkExternal sources curated by the MISP threat-intel community.
Timeline
1 monthsTop countries
Top sectors
MITRE ATT&CK
3 techniques · 3 tacticsTactics
Recent victims
Loading…
Onion infrastructure
4 known- http://krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion
- http://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion
- http://krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion
- http://krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion
Source
Updated 2 days agoData on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.
