krybit
First seen April 3, 2026Active163 claimed victims
The claims below are reproduced as posted by krybit on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| daralteb.com | October 4, 2026 | ransomlook | — |
| superpack.com.co | October 4, 2026 | ransomlook | — |
| euroditel.com | October 4, 2026 | ransomlook | — |
| sai.org.in | October 2, 2026 | ransomlook | — |
| www.pierrefeu.fr | October 2, 2026 | ransomlook | — |
| www.raajratna.com | October 2, 2026 | ransomlook | — |
| www.kres.cz | October 2, 2026 | ransomlook | — |
| EURODITEL/RESOTELECOM | October 1, 2026 | ransomware_live | — |
| DISK PRECISION GROUP - diskprecision.com | October 1, 2026 | ransomlook | — |
| efada.sa | September 24, 2026 | ransomlook | — |
| www.jonesthegrocer.com | September 24, 2026 | ransomlook | — |
| airtanzania.co.tz / airtanzania.com | September 24, 2026 | ransomlook | — |
| acilnet.com | September 20, 2026 | ransomlook | — |
| www.diakonie-apolda.de | September 18, 2026 | ransomlook | — |
| www.harputyapi.com | September 18, 2026 | ransomlook | — |
| www.kashkha.com | September 13, 2026 | ransomlook | — |
| swadeshicipl.com | September 12, 2026 | ransomlook | — |
| www.eac-airports.com | September 12, 2026 | ransomlook | — |
| meridian16.hr | September 12, 2026 | ransomlook | — |
| intherpro.com | September 12, 2026 | ransomlook | — |
| www.metalware.ca | September 12, 2026 | ransomlook | — |
| pss.ht | September 12, 2026 | ransomlook | — |
| eracm.fr | September 12, 2026 | ransomlook | — |
| lasultanahotels.com | September 12, 2026 | ransomlook | — |
| www.ibnsinatrust.com | September 12, 2026 | ransomlook | — |
| capricornlogistics.com | September 12, 2026 | ransomlook | — |
| www.tender.mx | September 12, 2026 | ransomlook | — |
| www.tiflispalace.ge | September 12, 2026 | ransomlook | — |
| ligacancerguate.org | September 3, 2026 | ransomlook | — |
| incan.org.gt | September 3, 2026 | ransomlook | — |
| hccd-construction.com | September 1, 2026 | ransomlook | — |
| southsign.in | September 1, 2026 | ransomlook | — |
| transportesmontejo.com | September 1, 2026 | ransomlook | — |
| meccahighfeed.blogspot.com | September 1, 2026 | ransomlook | — |
| vedantaainstitute.in | September 1, 2026 | ransomlook | — |
| jswlaw.bt | September 1, 2026 | ransomlook | — |
| dmt-group.com | September 1, 2026 | ransomlook | — |
| amptc.net | September 1, 2026 | ransomlook | — |
| orex.co.th | September 1, 2026 | ransomlook | — |
| reignwoodpark.com | September 1, 2026 | ransomlook | — |
| www.alphaplantes.com | September 1, 2026 | ransomlook | — |
| tum.com.mx | September 1, 2026 | ransomlook | — |
| uicc.org | September 1, 2026 | ransomlook | — |
| seashellhospital.com | September 1, 2026 | ransomlook | — |
| www.sankovn.com | August 26, 2026 | ransomlook | — |
| ferretornillos.gt | August 26, 2026 | ransomlook | — |
| karkinos.in | August 26, 2026 | ransomlook | — |
| cgcgabon.com | August 26, 2026 | ransomlook | — |
| wmiemporium.com | August 26, 2026 | ransomlook | — |
| finodayacapital.com | August 26, 2026 | ransomlook | — |
| lemonfarm.com | August 26, 2026 | ransomlook | — |
| www.neooftalmo.com.br | August 26, 2026 | ransomlook | — |
| vascara.com | August 26, 2026 | ransomlook | — |
| mimafoods.net | August 26, 2026 | ransomlook | — |
| jindallifescience.com | August 26, 2026 | ransomlook | — |
| sysconth.com | August 26, 2026 | ransomlook | — |
| resi.com | August 24, 2026 | ransomware_live | — |
| www.hsi.info | August 19, 2026 | ransomware_live | — |
| sipresitalia.it | August 19, 2026 | ransomware_live | — |
| automotoresrosedal.com.ar | August 19, 2026 | ransomware_live | — |
| www.mestojilemnice.cz | August 19, 2026 | ransomware_live | — |
| sunsea.co.th | August 19, 2026 | ransomware_live | — |
| lhyk.com.sg | August 12, 2026 | ransomware_live | — |
| labindia.com | August 12, 2026 | ransomware_live | — |
| hisstw.com | August 12, 2026 | ransomware_live | — |
| www.apsanet.com.ar | August 11, 2026 | ransomware_live | — |
| www.kilpi-koskinen.fi | August 11, 2026 | ransomware_live | — |
| studiotibaldi.it | August 9, 2026 | ransomware_live | — |
| www.hymiasa.com | August 7, 2026 | ransomware_live | — |
| www.serengetiestates.co.za | August 7, 2026 | ransomware_live | — |
| www.ernat-bureau-etudes.fr | August 7, 2026 | ransomware_live | — |
| www.actini.com | August 7, 2026 | ransomware_live | — |
| reflet2000.fr | August 7, 2026 | ransomware_live | — |
| cesmac.edu.br | August 4, 2026 | ransomware_live | — |
| www.buzztrading104.co.za | August 2, 2026 | ransomware_live | — |
| countrymotors.com.mx | August 2, 2026 | ransomware_live | — |
| www.ville-rinxent.fr | August 2, 2026 | ransomware_live | — |
| nigeria.asa-international.com | August 2, 2026 | ransomware_live | — |
| www.dcpartner.co.za | August 2, 2026 | ransomware_live | — |
| www.prohealth.sg | August 2, 2026 | ransomware_live | — |
| chkck.com | July 23, 2026 | ransomware_live | — |
| laxai.com | July 23, 2026 | ransomware_live | — |
| nilepet.com | July 23, 2026 | ransomware_live | — |
| Vibonum Technologies Private Limited | July 22, 2026 | ransomware_live | — |
| dhli.in | July 22, 2026 | ransomware_live | — |
| eurohold.bg | July 19, 2026 | ransomware_live | — |
| euroins.bg | July 18, 2026 | ransomware_live | — |
| www.lagus.cz | July 17, 2026 | ransomware_live | — |
| rehabmalaysia.com | July 17, 2026 | ransomware_live | — |
| formasuniversales.com | July 17, 2026 | ransomware_live | — |
| eitzchaim.com | July 17, 2026 | ransomware_live | — |
| shelby.com.mx | July 8, 2026 | ransomware_live | — |
| xuerong.com | July 8, 2026 | ransomware_live | — |
| seprec.gob.bo | July 5, 2026 | ransomware_live | — |
| duflosa.com | July 3, 2026 | ransomware_live | — |
| majuhome.com.my | July 3, 2026 | ransomware_live | — |
| moscati.org | July 1, 2026 | ransomware_live | — |
| www.northern-access.com | July 1, 2026 | ransomware_live | — |
| aai.com.tw | July 1, 2026 | ransomware_live | — |
| TRANSPORTES Y LOGISTICA BRAS, S.A | July 1, 2026 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).