krybit

Ransomware
Sourceransomware.live
0

About the group

Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group krybit has 8 known ransomware victims. See the most affected sectors and countries and recent victims.

8known victims
8in Brazil
6sectors hit
Activity (12 months)
04
06
08
Most attacked sectors
Professional Services3
Education1
Financial Services1
Healthcare1
Retail & E-Commerce1
Technology1
Most affected countries
🇧🇷 Brasil8
Recent victims
vascara.comRetail & E-Commerce · BR · 2026-08-26
sysconth.comTechnology · BR · 2026-08-26
www.neooftalmo.com.brHealthcare · BR · 2026-08-26
cesmac.edu.brEducation · BR · 2026-08-04
www.mupras.comProfessional Services · BR · 2026-06-19
coemi.com.brFinancial Services · BR · 2026-06-19
schultz.com.brProfessional Services · BR · 2026-06-05
secran.com.brProfessional Services · BR · 2026-04-14

References

krybit uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →