krybit
First seen April 3, 2026Active163 claimed victims
The claims below are reproduced as posted by krybit on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| gitmea.com | July 1, 2026 | ransomware_live | — |
| www.diss.com | July 1, 2026 | ransomware_live | — |
| gsp.es | July 1, 2026 | ransomware_live | — |
| jaws.com.tw | July 1, 2026 | ransomware_live | — |
| blaofood.com | July 1, 2026 | ransomware_live | — |
| ford.mx | June 28, 2026 | ransomware_live | — |
| sansilvestre.edu.pe | June 25, 2026 | ransomware_live | — |
| politur.gob.do | June 25, 2026 | ransomware_live | — |
| coemi.com.br | June 19, 2026 | ransomware_live | — |
| www.mupras.com | June 19, 2026 | ransomware_live | — |
| aasa.ae | June 19, 2026 | ransomware_live | — |
| ersa.com.py | June 17, 2026 | ransomware_live | — |
| www.courdescomptes.sn | June 17, 2026 | ransomware_live | — |
| theorangeblowfish.com | June 15, 2026 | ransomware_live | — |
| frey.com | June 14, 2026 | ransomware_live | — |
| www.mbt-energy.com | June 13, 2026 | ransomware_live | — |
| www.progress-security.com | June 12, 2026 | ransomware_live | — |
| PROBE, S.A. DE C.V | June 10, 2026 | ransomware_live | — |
| libertyinsurance.com.ph | June 10, 2026 | ransomware_live | — |
| aisem.gob.bo | June 9, 2026 | ransomware_live | — |
| huashan.com.cn | June 6, 2026 | ransomware_live | — |
| schultz.com.br | June 5, 2026 | ransomware_live | — |
| www.elumax.com | June 3, 2026 | ransomware_live | — |
| www.transbras.com.gt | June 2, 2026 | ransomware_live | — |
| ecci-srl.com | May 30, 2026 | ransomware_live | — |
| activ88-interim.com | May 30, 2026 | ransomware_live | — |
| smile-siam.com | May 27, 2026 | ransomware_live | — |
| motofrenos.com | May 27, 2026 | ransomware_live | — |
| bangkok.go.th | May 23, 2026 | ransomware_live | — |
| ctps.tp.edu.tw | May 23, 2026 | ransomware_live | — |
| mindmastersg.com | May 19, 2026 | ransomware_live | — |
| nacs.com.hk | May 19, 2026 | ransomware_live | — |
| SARL CANIS EVENTS SÉCURITÉ PRIVÉE | May 19, 2026 | ransomware_live | — |
| lasevillanita.com | May 18, 2026 | ransomware_live | — |
| wwag.org | May 15, 2026 | ransomware_live | — |
| eclagestio360.com | May 9, 2026 | ransomware_live | — |
| foodsmart.com.do | May 5, 2026 | ransomware_live | — |
| ovextech.com | May 4, 2026 | ransomware_live | — |
| tulipmediworld.com | May 1, 2026 | ransomware_live | — |
| weiss-pm.de | April 30, 2026 | ransomware_live | — |
| bomuhospital.org | April 30, 2026 | ransomware_live | — |
| Narteks Tekstil A.S | April 27, 2026 | ransomware_live | — |
| zsiclife.co.zm | April 26, 2026 | ransomware_live | — |
| moser-spiel.at | April 25, 2026 | ransomware_live | — |
| imbriefamilylaw.com | April 17, 2026 | ransomware_live | — |
| rhode-hv.de | April 16, 2026 | ransomware_live | — |
| putzbaer.berlin | April 15, 2026 | ransomware_live | — |
| Some 0APT false claims | April 14, 2026 | ransomware_live | — |
| secran.com.br | April 14, 2026 | ransomware_live | — |
| palladium.gen.tr | April 14, 2026 | ransomware_live | — |
| unipest.co.th | April 14, 2026 | ransomware_live | — |
| asesoriauriel.com | April 14, 2026 | ransomware_live | — |
| Hacked 0APT | April 14, 2026 | ransomware_live | — |
| dencom.co.nz | April 11, 2026 | ransomware_live | — |
| conrepsa.ro | April 10, 2026 | ransomware_live | — |
| Gerald Zisser GmbH | April 8, 2026 | ransomware_live | — |
| megasurf.co.za | April 8, 2026 | ransomware_live | — |
| CCCKeito.edu.hk | April 4, 2026 | ransomware_live | — |
| BJ Grupo | April 3, 2026 | ransomware_live | — |
| lkc.ac.bw | April 3, 2026 | ransomware_live | — |
| fraper.com | April 3, 2026 | ransomware_live | — |
| whiskey.co.jp | March 31, 2026 | ransomware_live | — |
| kramer-nsc.at | March 30, 2026 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).