Kyber
| Active
Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.
Victims
1
First Victim
2026-03-18
(est. attack date)
Discovery Date
2026-07-30
Last Seen
2026-07-30
Inactive Since
29
days
Avg Delay
134
days
Infostealer
100.0%
victims with domain
Countries
1
hit
Uptime
94.2% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
CAPTCHA Verification | Yes | 2026-08-28T12:48:56 | gunicorn |
kyblogtz6k3jtxnjjvluee5ec4g3zcnvyvbgsnq5thumphmqidkt7xid.onion
|
Target
Top 5 Activity Sectors
- Government & Defense 1
Top 5 Countries
-
United States
1
