krybit

Ransomware
Sourceransomware.live
0

Vexday analysis

Krybit é uma operação de ransomware como serviço (RaaS) surgida no final de março de 2026, que oferece a afiliados uma divisão de receita de 80/20 com suporte a criptografia em ambientes Windows, Linux, ESXi e dispositivos NAS. O grupo ganhou notoriedade por uma disputa pública com o grupo rival 0APT, na qual ambos invadiram e vazaram dados operacionais um do outro. No Brasil, são registradas 4 vítimas conhecidas atribuídas à operação.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group krybit has 5 known ransomware victims. See the most affected sectors and countries and recent victims.

5known victims
5in Brazil
3sectors hit
Activity (12 months)
04
06
08
Most attacked sectors
Professional Services3
Education1
Financial Services1
Most affected countries
🇧🇷 Brasil5
Recent victims
cesmac.edu.brEducation · BR · 2026-08-04
www.mupras.comProfessional Services · BR · 2026-06-19
coemi.com.brFinancial Services · BR · 2026-06-19
schultz.com.brProfessional Services · BR · 2026-06-05
secran.com.brProfessional Services · BR · 2026-04-14

krybit uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →