krybit

Krybit operates as a ransomware group that extorts victims through data exfiltration and leakage threats, pressuring negotiations to prevent disclosure. 125 victims have been claimed, with the most affected sectors being Technology, Business Services, Healthcare, Other, and Professional Services, and the most affected countries being Mexico, India, Germany, Brazil, and France. A pattern in reporting shows Krybit leveraging data compromise and leakage threats to coerce victims, illustrated by the September 1, 2026 attack on the Arab Maritime Petroleum Transport Company in Kuwait, where Krybit claimed responsibility and demanded negotiations to prevent further leaks. The reporting also notes ecosystem-level extortion dynamics, such as April 10, 2026 when the rival 0APT group threatened to expose Krybit-affiliated individuals and leaked a sample of allegedly stolen data, highlighting doxxing and data exposure as leverage.

Sectors: Technology, Business Services, Healthcare · Countries: MX, IN, DE