HelloKitty Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
November 13, 2025
Last Seen
July 16, 2026

Related Threat Clusters

  • Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

    SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

    50 articles · Updated July 15, 2026
  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1901 articles · Updated February 12, 2026
  • Shift in Ransomware Tactics Targeting Cloud Assets

    Ransomware actors are increasingly focusing on cloud-based assets, particularly in AWS environments. This shift involves utilizing various tactics to compromise critical business data, moving away from traditional…

    56 articles · Updated November 19, 2025
  • Kraken Ransomware Targets Multiple Systems with Advanced Encryption Techniques

    The Kraken ransomware, which targets Windows and Linux/VMware ESXi systems, emerged in February 2025 as a continuation of the HelloKitty operation. It employs a double extortion technique, testing systems to optimize…

    2 articles · Updated November 13, 2025
  • Kraken Ransomware Emerges from HelloKitty with Advanced Techniques

    The Kraken ransomware, identified in February 2025, is a sophisticated Russian-speaking threat that evolved from the HelloKitty ransomware cartel. It employs double extortion tactics, targeting various sectors across…

    4 articles · Updated November 17, 2025

Recent Intelligence Reports

  • Unc2447 Sombrat And Fivehands Ransomware Sophisticated Financial Threat — cloud.google.com · July 16, 2026
  • Kraken Uses Benchmarking to Enhance Ransomware Attacks — Infosecurity-Magazine · November 17, 2025
  • HelloKitty Returns as Kraken Ransomware: New Cross-Platform Threat — Technadu · November 14, 2025
  • Kraken ransomware benchmarks systems for optimal encryption choice — Bleepingcomputer · November 13, 2025
  • Unleashing the Kraken ransomware group — Blog.Talosintelligence · November 13, 2025

CVSS v3.1 Breakdown