Kyber
| Active
Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.
Victims
1
First Discovered
2026-07-30
victim
Last Discovered
2026-07-30
victim
Inactive Since
9
days
Avg Delay
134
days
Infostealer
100.0%
victims with domain
Countries
1
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
CAPTCHA Verification | Yes | 2026-08-08T19:31:51 | gunicorn |
kyblogtz6k3jtxnjjvluee5ec4g3zcnvyvbgsnq5thumphmqidkt7xid.onion
|
Target
Top 5 Activity Sectors
- Government & Defense 1
Top 5 Countries
-
United States
1
