Skip to content
Kraken Ransomware Targets Multiple Systems with Advanced Encryption Techniques

Kraken Ransomware Targets Multiple Systems with Advanced Encryption Techniques

First seen 14 Nov 2025, 11:11 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

The Kraken ransomware, which targets Windows and Linux/VMware ESXi systems, emerged in February 2025 as a continuation of the HelloKitty operation. It employs a double extortion technique, testing systems to optimize data encryption speed while threatening victims with data leaks if ransoms are not paid. Victims are located globally, including in the US, UK, Canada, and several other countries.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track HelloKitty in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed