+ Request intel workspace

ransomware

krybit

Provisional

Ransomware

Motivation

—

Attribution confidence

Provisional — not yet assessed

Provisional profile auto-created from leak-site claims — not analyst-vetted. A group's self-claim of a victim, not a confirmed breach.

Why it mattersRansomware actor, unrated confidence.

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Targets

acilnet.comtargetLeak-site claim · ransomware.live2026-09-20
www.harputyapi.comtargetLeak-site claim · ransomware.live2026-09-17
www.kashkha.comtargetLeak-site claim · ransomfeed2026-09-13
intherpro.comtargetLeak-site claim · ransomfeed2026-09-12
www.ibnsinatrust.comtargetLeak-site claim · ransomware.live2026-09-12
lasultanahotels.comtargetLeak-site claim · ransomware.live2026-09-12
www.eac-airports.comtargetLeak-site claim · ransomfeed2026-09-12
hccd-construction.comtargetLeak-site claim · ransomfeed2026-09-01
amptc.nettargetLeak-site claim · ransomfeed2026-09-01
meccahighfeed.blogspot.comtargetLeak-site claim · ransomware.live2026-09-01
seashellhospital.comtargetLeak-site claim · ransomfeed2026-09-01
mimafoods.nettargetLeak-site claim · ransomfeed2026-08-26
nilepet.comtargetLeak-site claim · ransomware.live2026-07-23
eitzchaim.comtargetLeak-site claim · ransomware.live2026-07-17
aasa.aetargetLeak-site claim · ransomware.live2026-06-19
Narteks Tekstil A.StargetLeak-site claim · ransomware.live2026-04-27
palladium.gen.trtargetLeak-site claim · ransomware.live2026-04-14

Claimed victims · 17 tracked

Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →

Claim volume · last 12 months

ONDJFMAMJJAS

Date	Victim	Country	Sector
2026-09-20	acilnet.com	Türkiye	Technology
2026-09-17	www.harputyapi.com	Türkiye	—
2026-09-13	www.kashkha.com	UAE	—
2026-09-12

Useful?