cry0
ransomware group · aka cry0, Cryo · unknown · active since 2026-08-06 (earliest leak-site post tracked by this dashboard; independently corroborated first-activity date unknown)
cry0 (also rendered 'Cryo') is a low-volume ransomware and data-extortion group tracked by this dashboard through its public leak site, with the earliest tracked post dated 2026-08-06. Observed activity is minimal: one victim in the past 90 days, none in the past 30 days, and one post total since tracking began, consistent with an emerging or highly sporadic operation. The group follows the standard leak-site model of publicly naming victims to pressure payment, but public reporting does not yet establish whether it employs file encryption or operates as a ransomware-as-a-service brand. Attribution, country of origin, sector focus, and financial scale are not established in widely available public sources. Defenders should treat cry0 as an emerging, poorly documented actor and monitor leak-site trackers for follow-on activity.
- Operates a public leak site that names victims individually to pressure payment (data-extortion model)
- No public technical confirmation whether the group encrypts systems or conducts data theft only
- Very low posting cadence: 1 victim in 90 days, 0 in the last 30 days (dashboard data)
- Initial access vector, tooling, and attack infrastructure: unknown in public reporting
- No widely reported CVE associations to date
Hope's Windows, dinisrl.it
No public figure.
Leak-site victims2 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Hope's Windows | · Aug 6, 2026 | Coming soon.... |
| dinisrl.it | · Apr 6, 2026 | DINI is a family-run transportation and automotive business based in Noceto, Italy. With two main branches - Dini Autogr and Dini Autotrasporti - the company provides local trucking and automotive services across the Parma region. Since 2012, they have built a strong reputation for reliable and professional transportation solutions. The download will be available on April 13 at 12:00 UTC |
In the newsAll →
No articles mention this group yet.