Kazu
Kazu is an emerging ransomware group active since September 2025 that employs double-extortion tactics, targeting government, healthcare, and financial organizations primarily in Southeast Asia, the Middle East, and Latin America, with notable claimed breaches including Dubai's Ports, Customs and Free Zone Corporation with 1.94 TB exfiltrated.
Victims
9
First Discovered
2025-11-11
victim
Last Discovered
2026-01-26
victim
Inactive Since
107
days
Avg Delay
2.5
days
Infostealer
55.6%
victims with domain
Countries
7
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
404 Not Found | No | 2026-05-13T07:13:29 | Apache 2.4.65 (Debian) |
6czlbd2jfiy6765fbnbnzuwuqocg57ebvp3tbm35kib425k4qnmiiiqd.onion
|
Target
Top 5 Activity Sectors
- Healthcare 3
- Public Sector 2
- Technology 1
- Business Services 1
- Construction 1
Top 5 Countries
-
United States
2
-
Colombia
2
-
Spain
1
-
New Zealand
1
-
Saudi Arabia
1
Heatmap
YARA Rules (1)
Victims (9)
zHealthEHR is a cloud-based electronic health record (EHR) and practice management platform built pr…
ManageMyHealth is a New Zealand-based online platform that enables individuals to conveniently manag…
Saudi Icon specializes in design and build solutions, offering a holistic approach to construction a…
Leadway Assurance Company Limited is the leading insurance provider in Nigeria, offering a comprehen…
CT Dent Ltd is an independent CBCT imaging centre based in London, UK, specializing in dental CT sca…
The official portal of the Comisión Nacional del Servicio Civil (CNSC), Colombia’s National Civil Se…
The official online portal of the Defensoría del Pueblo de Colombia, a constitutional and autonomous…
Doctor Alliance (doctoralliance.com) is a U.S.-based healthcare technology platform that helps physi…