cry0
First seen January 19, 2026Active2 claimed victims
The claims below are reproduced as posted by cry0 on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Cry0 is a ransomware-as-a-service operation that recruits affiliates via underground forums, using a Rust-written payload with blockchain-based (Internet Computer Protocol) negotiation infrastructure to resist law enforcement takedowns and offering affiliates a 90/10 revenue split.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Hope's Windows | August 6, 2026 | ransomware_live | — |
| dinisrl.it | March 30, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).