Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves.
Krybit ransomware: what you need to know
About this summary. This is a short excerpt from the description that Graham Cluley published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.fortra.com/blog/krybit-ransomware-what-you-need-know
Source attribution: headline and facts are from Graham Cluley (fortra.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Welsh firms ‘Password1’ and ‘Test 2’ fails led to hackers stealing children’s data
Alex Hickey reports: Two Welsh organisations have been censured by the Information Commissioner’s Office (ICO) after a ransomware attack led to the theft of personal…
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters gang. Meanwhile…
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete…
Arizona Supreme Court says hackers stole residents’ personal data
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen…
Nefilim and Hive ransomware affiliate gets 70 months in prison
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses…
n0n Ransomware: Inside an AI-Assisted Extortion Operation
In September 2026, the SOCRadar Threat Research Unit (STRU) discovered an exposed staging server holding the live workspace of an operator tied to the n0n ransomware…