CrownX Ransomware — Victims, Campaigns & Activity

Related Threat Clusters

• Avalon Malware Framework Delivers CrownX Ransomware via Legal Document Lure

  A new malware framework named Avalon has been discovered, utilizing a spoofed legal document to deliver a ransomware component known as CrownX. This previously undocumented malware employs a multi-stage, fileless attack…

  3 articles · Updated July 4, 2026

Recent Intelligence Reports

• Avalon Malware Framework: Advanced Modular Threat Leveraging CrownX Ransomware ... — Rescana · July 5, 2026
• Avalon Malware Uses Legal Document Lure to Deliver CrownX Ransomware Capabilities — Gbhackers · July 4, 2026
• New Avalon Malware Framework Packs CrownX Ransomware Capabilities — Thehackernews · July 4, 2026

Related Entities