kyber

Kyber is a ransomware group that operates an extortion-focused model, using claims of post-quantum cryptography to pressure victims; it asserts quantum resistance via the ML-KEM standard even though its encryption methods are described as conventional. Victims claimed: 1; the sectors hit most often are Government & Defense, and the United States is the country most often hit. Recent reporting shows a pattern of deploying platform-specific variants across Windows and ESXi; for example, in March 2026 Rapid7 observed two variants in the same environment, one for ESXi and the other for Windows.

Sectors: Government & Defense · Countries: US