KR

krybit

Known ransomware group ACTIVE
Currently active

Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.

18

Total Claims

4

Critical

—

Records Claimed

9

Industries Hit

Active span: Apr 11, 2026 – Oct 4, 2026 · 18 organizations targeted

Currently active
Activity 6.2 Severity 4.2 Sectors 7.7 Tooling 0.0

Actor Threat Profile

Activity Timeline

Peak: May 2026 (5)
Apr 2026
LessMore
Oct 2026

Share this profile

Shareable intel card for krybit

Top Targeted Industries

Healthcare 4
Technology 3
Other 2
Transportation 2
Manufacturing 2
Government & Defense 1

Tradecraft & Infrastructure

0

Documented tools

0 / 0

MITRE tactics / techniques

6

Known leak sites

Full intelligence profile on ransomware.live →

Claims by krybit

Critical

Ransomware Claim: daralteb.com

daralteb.com
krybit
Ransomware Healthcare
Oct 4, 2026
Low

Ransomware Claim: euroditel.com

euroditel.com
krybit
Ransomware Technology
Oct 4, 2026
Low

Ransomware Claim: EURODITEL/RESOTELECOM

EURODITEL/RESOTELECOM
krybit
Ransomware Technology
Oct 2, 2026
Low

Ransomware Claim: www.pierrefeu.fr

www.pierrefeu.fr
krybit
Ransomware Other
Oct 2, 2026
Low

Ransomware Claim: www.eac-airports.com

www.eac-airports.com
krybit
Ransomware Transportation
Sep 13, 2026
Critical

Ransomware Claim: www.ibnsinatrust.com

www.ibnsinatrust.com
krybit
Ransomware Healthcare
Sep 12, 2026
Low

Ransomware Claim: capricornlogistics.com

capricornlogistics.com
krybit
Ransomware Transportation
Sep 12, 2026
Low

Ransomware Claim: eracm.fr

eracm.fr
krybit
Ransomware Other
Sep 12, 2026
Low

Ransomware Claim: www.tender.mx

www.tender.mx
krybit
Ransomware Government & Defense
Sep 12, 2026
Critical

Ransomware Claim: tulipmediworld.com

tulipmediworld.com
krybit
Ransomware Healthcare
May 31, 2026
Low

Ransomware Claim: ctps.tp.edu.tw

ctps.tp.edu.tw
krybit
Ransomware Education
May 27, 2026
Low

Ransomware Claim: SARL CANIS EVENTS SÉCURITÉ PRIVÉE

SARL CANIS EVENTS SÉCURITÉ PRIVÉE
krybit
Ransomware Business Services
May 20, 2026
Low

Ransomware Claim: foodsmart.com.do

foodsmart.com.do
krybit
Ransomware Agriculture and Food Production
May 5, 2026
Critical

Ransomware Claim: bomuhospital.org

bomuhospital.org
krybit
Ransomware Healthcare
May 2, 2026
Low

Ransomware Claim: Narteks Tekstil A.S

Narteks Tekstil A.S
krybit
Ransomware Manufacturing
Apr 27, 2026
Low

Ransomware Claim: rhode-hv.de

rhode-hv.de
krybit
Ransomware Manufacturing
Apr 18, 2026
Low

Ransomware Claim: Hacked 0APT

Hacked 0APT
krybit
Ransomware Technology
Apr 15, 2026
Low

Ransomware Claim: conrepsa.ro

conrepsa.ro
krybit
Ransomware
Apr 12, 2026

Never Miss a Critical Alert

CVE advisories, breach reports, and threat intel — delivered daily to your inbox.