New Galago Ransomware Operation Emerges With Links to Panzer Extortion Group
Galago ransomware, linked to Panzer, allegedly stole 105 GB from Icelandic healthcare firm Inter ehf; its leak site is inactive.
A new ransomware brand called Galago publicly claims a partnership with the Panzer extortion group. Its Tor leak site, monitored from 15 September 2026, was inactive and listed no victims, but the domain uses the same pnzr prefix as Panzer's site. Panzer published 32 alleged victims between 5 August and 23 September 2026. An unconfirmed 9 September report alleged Galago took about 105 GB from Icelandic healthcare organization Inter ehf, with a possible publication window around 28-29 September; no encryption or data publication has been independently verified.
52