shiba
ransomware group · aka Shiba Gang · Russia-linked; Sekoia.io (October 2025) assesses the group is operated by the 'Operation King Hammer' criminal syndicate previously behind RansomHub and Cicada3301 · active since October 2025
- Victims · 7d3+3 vs prior week
- Victims · 30d5
- Victims · 90d7
- All-time (tracked)7since 2026-09-28
- Last post11-01 18:25UTC
- Estimated earnings—public reporting
Shiba is a ransomware-as-a-service and data-extortion operation that surfaced in early October 2025 and quickly listed dozens of claimed victims on its leak site. Sekoia.io assesses with high confidence that it is run by the 'Operation King Hammer' syndicate, the Russia-linked actor previously behind RansomHub and Cicada3301, and that its locker is built from leaked Babuk source code. The group reportedly gained initial access by exploiting a zero-day vulnerability in a file transfer service, then used double extortion with data theft, encryption, and leak-site shaming. Victims are concentrated in the United States and Western Europe, with education and healthcare among the hardest-hit sectors. Posting volume has fallen well below its late-2025 peak, but the leak site remained active into late October 2026.
- Ransomware-as-a-service model with recruited affiliates
- Locker derived from leaked Babuk source code, sharing code lineage with RansomHub and Cicada3301 lockers
- Initial access reportedly via a zero-day vulnerability in a file transfer service (product not publicly disclosed)
- Double extortion: data theft plus encryption and public shaming on a leak site
- Assessed to reuse Operation King Hammer tradecraft, including abuse of legitimate remote-access software
- Concentrated targeting of organizations in the United States and Western Europe
Oneonta City School District, Morgan White Group, IT Foods Industries, Friendly Senior Living, maltest
No public figure.
Leak-site victims
7 posts · newest first| Victim | Discovered | Details |
|---|---|---|
| Tema Hwt | · 1h ago | Construction - Germany TEMA Heizung Berlin is a company that provides heating services in Berlin. They offer a range of heating options including heating pumps, maintenance, and optimization. They also provide services for existing oil/gas heating. |
| Antwerp House Dentistry | · 3d ago | Healthcare Services - United Kingdom Local dentist clinic based in Cambridge, London |
| Oneonta City School District | · 5d ago | Education - United States of America Oneonta City School District is dedicated to empowering students with the knowledge, skills, and values necessary for success in a changing world. The district offers a supportive environment where a caring staff encourages personal responsibility, civic participation, and a lifelong love of learning. Their programs and events are designed for students, families, and the community, fostering engagement and educational growth. The district serves the local community, focusing on preparing students for future careers and active citizenship |
| maltest | · 21d ago | Construction - Algeria awdwa daw daw dawdwa |
| Morgan White Group | · 25d ago | Insurance - United States of America Morgan White Group, Inc. provides insurance products and administrative solutions to customers, brokers, and carriers. The company was founded in 1987 and is based in Jackson, Mississippi. |
| IT Foods Industries | · Sep 28, 2026 | Manufacturing I.T. Foods Industries Co., Ltd. is a Thai manufacturer and exporter specializing in high-quality frozen foods, including frozen fruits, vegetables, fishery products, and value-added items. Established in 1990, the company adheres to international quality standards such as ISO 22000:2018 and GMP, ensuring food safety and quality. Their target clients include global markets seeking ready-to-cook and ready-to-eat products. With a commitment to innovation and customer satisfaction, I.T. Foods aims to enhance the quality of life through their diverse frozen food offerings. https://www.itfoods.co.th |
| Friendly Senior Living | · Sep 28, 2026 | Hospitals & Physicians Clinics Friendly Senior Living offers a range of independent assisted living and senior apartments designed to meet the lifestyle preferences and changing care needs of seniors. Their services include independent senior living, assisted living, memory care, transitional care, and skilled nursing care across various communities. With a history dating back to 1849, they are committed to providing compassionate care and quality offerings for their residents. The company aims to enhance the lives of seniors in Rochester through a continuum of care and community support. https://www.friendlyseniorliving.org |
In the news
AllNo articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .