Ransomware Group intelligence

Krybit

Active

Track Krybit with 111 published victims and 5 known leak locations in a single intelligence view.

Victims 111 Known published victims in this dataset
First discovered 2026-04-03 Earliest victim discovery date
Last discovered 2026-07-23 Latest victim discovery date
Inactive since 5 days Days since the latest known victim
Top country Mexico 12 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Krybit is tracked by Breach House as a ransomware group with 111 published victims.

Mexico is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion
    Leak location 2 Web location Unknown krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.
    Leak location 3 Onion service Unknown krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion
    Leak location 4 Onion service Unknown krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion
    Leak location 5 Onion service Unknown krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (111)

    Search, filter and paginate the victim timeline for Krybit. Showing 101–111 of 111.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Some 0APT false claims id28194 View details Other
    Ransomware dencom.co.nz id28089 View details New Zealand Telecommunications
    Ransomware conrepsa.ro id28075 View details Romania Construction / Real Estate
    Ransomware megasurf.co.za id28050 View details South Africa Telecommunications
    Ransomware Gerald Zisser GmbH id27964 View details Germany Transportation / Travel / Logistics
    Ransomware fraper.com id27943 View details Spain IT
    Ransomware CCCKeito.edu.hk id27924 View details Hong Kong Education
    Ransomware lkc.ac.bw id27885 View details Botswana Education
    Ransomware BJ Grupo id27876 View details Mexico Transportation / Travel / Logistics
    Ransomware kramer-nsc.at id27875 View details Austria IT
    Ransomware whiskey.co.jp id27874 View details Japan IT