Ransomware group
Krybit ransomware: victims and leak site activity
The Krybit ransomware group has listed 134 victims on its leak site since April 2026; its latest post is from 3 September 2026. Most affected countries: Mexico, Germany and India. Most targeted sector: Professional Services.
Total posts
134
First seen
2026-04-03
Latest post
2026-09-03
Countries hit
47
About Krybit
Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.
Most targeted countries
All countries →Most targeted sectors
- Professional Services 25
- Technology 18
- Retail & E-Commerce 15
- Healthcare 12
- Manufacturing 8
- Agriculture and Food Production 7
- Education 7
- Financial Services 6
- Government & Defense 6
- Transportation 5