CyberVolk Launches New Ransomware Service via Telegram
First seen 11 Dec 2025, 22:50 UTC
•

•91% similarity
•34.9
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
CyberVolk, a pro-Russian hacktivist group, has launched a new ransomware-as-a-service called CyberVolk 2.x (VolkLocker) after months of inactivity. This service operates entirely through Telegram, allowing less tech-savvy affiliates to easily encrypt files and demand ransom payments. The platform includes automation features for generating payloads, but it has been noted that the encryption keys are stored in plain text.
ThreatCluster AI
How this analysis works