krybit
Known ransomware group ACTIVE Currently active
Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.
19
Total Claims
4
Critical
—
Records Claimed
9
Industries Hit
Active span: Apr 11, 2026 – Oct 29, 2026 · 19 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (5)Apr 2026
LessMore
Oct 2026Share this profile
Top Targeted Industries
Healthcare 4
Transportation 3
Technology 3
Other 2
Manufacturing 2
Government & Defense 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
6
Known leak sites
Targeted Organizations
www.viehhauser-kfz.atdaralteb.comeuroditel.comEURODITEL/RESOTELECOMwww.pierrefeu.frwww.eac-airports.comwww.ibnsinatrust.comcapricornlogistics.comeracm.frwww.tender.mxtulipmediworld.comctps.tp.edu.twSARL CANIS EVENTS SÉCURITÉ PRIVÉEfoodsmart.com.dobomuhospital.orgNarteks Tekstil A.Srhode-hv.deHacked 0APTconrepsa.ro
Claims by krybit
Low
Ransomware Claim: www.viehhauser-kfz.at
www.viehhauser-kfz.at
krybit
Ransomware Transportation
Oct 29, 2026 Critical
Ransomware Claim: daralteb.com
daralteb.com
krybit
Ransomware Healthcare
Oct 4, 2026 Low
Ransomware Claim: euroditel.com
euroditel.com
krybit
Ransomware Technology
Oct 4, 2026 Low
Ransomware Claim: EURODITEL/RESOTELECOM
EURODITEL/RESOTELECOM
krybit
Ransomware Technology
Oct 2, 2026 Low
Ransomware Claim: www.pierrefeu.fr
www.pierrefeu.fr
krybit
Ransomware Other
Oct 2, 2026 Low
Ransomware Claim: www.eac-airports.com
www.eac-airports.com
krybit
Ransomware Transportation
Sep 13, 2026 Critical
Ransomware Claim: www.ibnsinatrust.com
www.ibnsinatrust.com
krybit
Ransomware Healthcare
Sep 12, 2026 Low
Ransomware Claim: capricornlogistics.com
capricornlogistics.com
krybit
Ransomware Transportation
Sep 12, 2026 Low
Ransomware Claim: eracm.fr
eracm.fr
krybit
Ransomware Other
Sep 12, 2026 Low
Ransomware Claim: www.tender.mx
www.tender.mx
krybit
Ransomware Government & Defense
Sep 12, 2026 Critical
Ransomware Claim: tulipmediworld.com
tulipmediworld.com
krybit
Ransomware Healthcare
May 31, 2026 Low
Ransomware Claim: ctps.tp.edu.tw
ctps.tp.edu.tw
krybit
Ransomware Education
May 27, 2026 Low
Ransomware Claim: SARL CANIS EVENTS SÉCURITÉ PRIVÉE
SARL CANIS EVENTS SÉCURITÉ PRIVÉE
krybit
Ransomware Business Services
May 20, 2026 Low
Ransomware Claim: foodsmart.com.do
foodsmart.com.do
krybit
Ransomware Agriculture and Food Production
May 5, 2026 Critical
Ransomware Claim: bomuhospital.org
bomuhospital.org
krybit
Ransomware Healthcare
May 2, 2026 Low
Ransomware Claim: Narteks Tekstil A.S
Narteks Tekstil A.S
krybit
Ransomware Manufacturing
Apr 27, 2026 Low
Ransomware Claim: rhode-hv.de
rhode-hv.de
krybit
Ransomware Manufacturing
Apr 18, 2026 Low
Ransomware Claim: Hacked 0APT
Hacked 0APT
krybit
Ransomware Technology
Apr 15, 2026 Low
Ransomware Claim: conrepsa.ro
conrepsa.ro
krybit
Ransomware
Apr 12, 2026