Osiris
| Active | RaaS
Osiris is a ransomware-as-a-service operation first observed in November 2025 that uses a Bring Your Own Vulnerable Driver (BYOVD) technique to disable endpoint detection tools before deploying hybrid ECC + AES-128-CTR encryption; Symantec researchers linked its operators to former INC ransomware affiliates.
Victims
3
First Discovered
2025-12-18
victim
Last Discovered
2026-03-23
victim
Inactive Since
51
days
Avg Delay
36
days
Infostealer
33.3%
victims with domain
Countries
3
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Osiris | No | 2026-05-13T22:44:36 |
osirisbm3357xrccnid23nlyuqwzbgqheaei6dxvyi34tbkqr3bmvfid.onion
|
Target
Top 5 Activity Sectors
- Technology 1
- Manufacturing 1
- Hospitality and Tourism 1
Top 5 Countries
-
India
1
-
United States
1
-
Philippines
1
Heatmap
YARA Rules (1)
Victims (3)
Mantra Softech India Pvt. Ltd., founded in 2006 and headquartered in Ahmedabad, is a leading global …
American Vanguard Corporation is a U.S.-based company specializing in agricultural chemicals, primar…
The Araneta Group is a private, diversified conglomerate in the Philippines — active in property dev…