ZeroHour

krybit

ransomware group · aka Krybit · unknown (no public vendor or law-enforcement reporting on country of origin, operators, or leadership) · active since 2026-06-12 (first tracked leak-site post per this dashboard; all tracked victim posts fall within the ~3 months after this date, consistent with a newly launched leak operation; any earlier activity unknown)

Victims · 7d
13▲11 vs prev. week
Victims · 30d
47active targets
Victims · 90d
96
All-time (tracked)
149since 2026-04-01
Last post
09-13 14:48UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Krybit is a ransomware/data-extortion group currently known publicly through its dedicated leak site, which this dashboard first tracked on 2026-06-12; the site has listed 90 victims through 2026-09-03. Its victim set to date skews toward healthcare and cancer-focused organizations — including Guatemala's INCAN, the Guatemalan Liga Contra el Cancer, and the Union for International Cancer Control — alongside legal, industrial, and consumer-facing organizations across Latin America and Asia. Beyond leak-site postings, little is documented: public research on initial access, tooling, ransomware-family affiliation, or a possible affiliate model is unknown as of this dashboard's data. Posting cadence has been steady (39 victims in the most recent 30-day window, 90 in 90 days, per this dashboard), indicating ongoing operations. No public earnings estimates or reported ransom payments exist, and no CVE associations are documented in public reporting.

Tactics & tooling
  • Operates a dedicated leak site naming victim organizations, typically implying exfiltrated data (observed).
  • Leak-site cadence averaging roughly one post per day since mid-June 2026 (observed: 90 posts in ~90 days per this dashboard).
  • Victim set to date includes cancer hospitals, cancer-control NGOs, a law firm, and industrial/consumer businesses (observed).
  • Geographic reach spans Latin America (Guatemala, Mexico) and Asia (Thailand, India, Bhutan) among listed victims (observed).
  • No publicly documented ransomware family, affiliate branding, or named malware strain (unknown).
  • Initial access techniques, infrastructure, and negotiation methods not documented in public reporting (unknown).
  • Whether the group conducts full double extortion (encryption plus data theft) or data-theft-only extortion is unconfirmed (unknown).
Targeted sectors
HealthcareNonprofit/NGOLegal servicesManufacturing/IndustrialConsumer goods/plants (tentative, based on listed victims)
Notable public victims

ligacancerguate.org (Liga Nacional Contra el Cancer, Guatemala), incan.org.gt (Instituto de Cancerologia / INCAN, Guatemala's national cancer institute), uicc.org (Union for International Cancer Control), jswlaw.bt (law firm, Bhutan), seashellhospital.com, tum.com.mx, dmt-group.com, orex.co.th, reignwoodpark.com, alphaplantes.com

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
www.mbt-energy.com · Jun 13, 2026Xiamen Mibet New Energy Co., Ltd. (Mibet Energy) is a Chinese high-tech enterprise specializing in the research, develop...
aisem.gob.bo · Jun 12, 2026AISEM (Agencia de Infraestructura en Salud y Equipamiento Médico) is a Bolivian government agency responsible for the d...
www.progress-security.com · Jun 12, 2026Progress Security Systems is a leading UAE-based provider of enterprise-grade security solutions, headquartered in Abu D...
PROBE, S.A. DE C.V · Jun 10, 2026PROBE, S.A. DE C.V. is a Salvadoran family-owned company founded in 1978, headquartered in San Salvador, El Salvador. It...
libertyinsurance.com.ph · Jun 10, 2026Liberty Insurance Corporation is a Philippine non-life insurance company established in 1953, headquartered in Makati Ci...
huashan.com.cn · Jun 6, 2026Shantou Huashan Electronic Devices Co., Ltd. (SHEDCL) is a Chinese manufacturer of semiconductor devices and electronic ...
schultz.com.br · Jun 5, 2026Schultz Operadora de Turismo helps people explore the world with easy travel planning. They handle everything from airli...
www.elumax.com · Jun 3, 2026Lumax is dedicated to maintaining high standards of ethics, corporate governance and effective accountability mechanisms...
activ88-interim.com · Jun 2, 2026Activ'Interim 88 was founded in 2008 with the aim of connecting job seekers with the best opportunities available in the...
www.transbras.com.gt · Jun 2, 2026Founded in 1974, started its activities in Road Transport, eventually expanding its services to several other areas, fir...
tulipmediworld.com · May 31, 2026A complete data breach has occurred at Tulip Mediworld Hospital, a multi-specialty hospital located on GS Road, Rukmini ...
ecci-srl.com · May 30, 2026Empresa dedicada al rubro de construcción de proyectos inmobiliarios, particularmente la Ciudad Nueva Santa Cruz. El á...
motofrenos.com · May 27, 2026MotoFrenos is a Colombian metalworking company with a global reach that designs, manufactures, and installs equipment an...
smile-siam.com · May 27, 2026Smile Siam Printing Service founded since 1995 by a group of experienced staff in printing business, we are the distinct...
ctps.tp.edu.tw · May 26, 2026ctps.tp.edu.tw — Taiwanese Public Elementary School ctps.tp.edu.tw is the official website of 臺北市南港區成...
bangkok.go.th · May 23, 2026The Bangkok Metropolitan Administration (BMA) is the local government of Bangkok, which includes the capital of Thailand...
lasevillanita.com · May 23, 2026Transportes La Sevillanita Srl is a company that operates in the Freight & Logistics Services industry. It employs 10to1...
SARL CANIS EVENTS SÉCURITÉ PRIVÉE · May 19, 2026SARL CANIS EVENTS SÉCURITÉ PRIVÉE is a company operating in the private security and guarding sector, with a focus on...
nacs.com.hk · May 19, 2026nacs.com.hk is a Hong Kong-based corporate and administrative services company, specializing in company formation and ma...
mindmastersg.com · May 19, 2026Mind Master offers an AI-native enterprise operations platform designed to govern execution and decision-making processe...
wwag.org · May 15, 2026An organization known as Wa Wai Assembly of God Church, an entity located in Hong Kong 🇭🇰 and operating under a na...
eclagestio360.com · May 9, 2026ECLAGESTIÓ A Spanish company specializing in comprehensive management for businesses and individuals, operating in the...
ovextech.com · May 5, 2026Ovex Tech specializes in providing comprehensive BPO services and call center solutions, including inbound and outbound ...
foodsmart.com.do · May 5, 2026Foodsmart Dominicana, S.R.L A company operating in the food industry Specializing in flour derivative products (harina...
bomuhospital.org · May 1, 2026Bomu Hospital is a social enterprise dedicated to providing access to quality healthcare for all individuals, regardless...
weiss-pm.de · Apr 30, 2026WEISS PM: The ideal company for tailored recruitment solutions. For nearly 40 years, WEISS PM has been a trusted partner...
zsiclife.co.zm · Apr 29, 2026ZSIC Life Plc is a leading assurance, savings, and wealth management company in Zambia, offering a diverse range of life...
moser-spiel.at · Apr 28, 2026moser-spiel.at is an Austrian company specializing in the design and manufacture of outdoor play equipment and sports pa...
Narteks Tekstil A.S · Apr 26, 2026Narteks Tekstil Sanayi ve Ticaret A.Ş., one of the well-known Turkish companies in the cotton yarn and textile industry...
imbriefamilylaw.com · Apr 20, 2026The attorneys at the Imbrie Law Firm practice primarily in the following counties: Brazos, Robertson, Burleson, Lee, Gri...
rhode-hv.de · Apr 17, 2026iseg Spezialelektronik GmbH is a German company specializing in high-voltage microelectronics (high-voltage electronics)...
putzbaer.berlin · Apr 17, 2026putzbär Gebäudemanagement GmbH is a building management company based in Berlin, specializing in a wide range of servi...
Hacked 0APT · Apr 14, 2026Next time, don't play with the big boys. The response will be fast....
asesoriauriel.com · Apr 14, 2026Asesoría Uriel is a consultancy and management firm located in Soria, specialized in providing services to individuals,...
unipest.co.th · Apr 14, 2026Unipest Company Limited specializes in pest control services, including the elimination of termites, ants, cockroaches, ...
palladium.gen.tr · Apr 14, 2026Palladium Teknoloji ve Mühendislik Ltd. Şti. is a private Turkish company operating in the field of industrial enginee...
secran.com.br · Apr 14, 2026SECRAN Group is a trusted partner with over 40 years of experience, focusing on providing a comprehensive portfolio of b...
Some 0APT false claims · Apr 14, 2026We apologize for this data leak, but it did not affect our operations. The error was in the server settings; the phpMyAd...
UNDER 0APT ATTACK · Apr 13, 2026Krybit is under attack, and its identity data is in the hands of 0apt. Contact them immediately, or the real identities ...
dencom.co.nz · Apr 12, 2026Dencom New Zealand Limited has been delivering IT support and solutions for over 30 years, catering to a diverse range o...
whiskey.co.jp · Apr 12, 2026Whiskey & Co., Inc. (in Japanese: Whiskey & Co.株式会社) is a modern Japanese company founded on January 28, 2021. I...
lkc.ac.bw · Apr 12, 2026Livingstone Kolobeng College (LKC) is a private educational institution located in Gaborone, the capital of Botswana . I...
fraper.com · Apr 12, 2026Comercial Fraper S.L. is a privately held Spanish company specializing in building materials, tools, and household suppl...
CCCKeito.edu.hk · Apr 12, 2026CCC Kei To Secondary School (中華基督教會基道中學) CCCKeito.edu.hk is the official website of this secondary ...
Gerald Zisser GmbH · Apr 12, 2026Gerald Zisser GmbH is a private Austrian company specializing in building technical services, focusing on plumbing, heat...
megasurf.co.za · Apr 12, 2026Megasurf is an internet service provider and data center operator specializing in high-speed fibre and wireless internet...
conrepsa.ro · Apr 12, 2026CONREP SA is a Romanian construction, contracting, and infrastructure company, considered one of the most experienced in...
BJ Grupo · Apr 1, 2026
kramer-nsc.at · Apr 1, 2026

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .