cry0
Known ransomware group ACTIVE Currently active
Cry0 is a ransomware-as-a-service operation that recruits affiliates via underground forums, using a Rust-written payload with blockchain-based (Internet Computer Protocol) negotiation infrastructure to resist law enforcement takedowns and offering affiliates a 90/10 revenue split.
1
Total Claims
0
Critical
—
Records Claimed
1
Industries Hit
Active span: Oct 2, 2026 – Oct 2, 2026 · 1 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Oct 2026 (1)Oct 2026
LessMore
Oct 2026Share this profile
Top Targeted Industries
Energy & Utilities 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
2
Known leak sites