Afraidgate: Major Exploit Kit Campaign Swaps Locky Ransomware for CryptXXX
Unit 42 reports the Afraidgate campaign switched from Nuclear EK delivering Locky to Angler EK delivering CryptXXX via the Bedep downloader.
38
Threat actor
Afraidgate
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
2 articles · newest firstAfraidgate: Major Exploit Kit Campaign Switches from CryptXXX Ransomware Back to Locky
The Afraidgate exploit kit campaign stopped distributing CryptXXX and now delivers the .zepto Locky variant exclusively through Neutrino EK since July 2016.
15
Appears with
- Palo Alto Networksvendor · 2
- Lockymalware · 2
- CryptXXXmalware · 2
- Angler EKmalware · 1
- Pseudo-Darkleechthreat actor · 1
- Nuclear EKmalware · 1
- Neutrino exploit kitmalware · 1
- Unit 42organization · 1
- Necurs botnetmalware · 1
- FreeDNSvendor · 1
- Zeptomalware · 1
- Angler exploit kitmalware · 1
- Bedepmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.