CyberVolk Launches New Ransomware Service via Telegram

CyberVolk Launches New Ransomware Service via Telegram

First seen 11 Dec 2025, 22:50 UTC TheregisterSocprimeBleepingcomputer 91% similarity 34.9

Article Content

Browse articles
ThreatCluster

CyberVolk, a pro-Russian hacktivist group, has launched a new ransomware-as-a-service called CyberVolk 2.x (VolkLocker) after months of inactivity. This service operates entirely through Telegram, allowing less tech-savvy affiliates to easily encrypt files and demand ransom payments. The platform includes automation features for generating payloads, but it has been noted that the encryption keys are stored in plain text.

ThreatCluster AI How this analysis works

Community

Browse all →

Tracked Entities in This Story