Frequency
3
occurrences
First Seen
March 15, 2026
Last Seen
May 26, 2026
Related Threat Clusters
-
Payload Ransomware Targets Global Organizations with ChaCha20 Encryption
Payload ransomware, first identified in February 2026, has rapidly expanded its operations, targeting logistics, real estate, and manufacturing sectors worldwide. The malware employs ChaCha20 encryption and Curve25519…
2 articles · Updated May 26, 2026 -
Payload Ransomware Breach of Royal Bahrain Hospital Exposes 110 GB of Data
The Payload Ransomware group has claimed responsibility for breaching the Royal Bahrain Hospital (RBH), a prominent healthcare facility in Bahrain, and has stolen 110 GB of sensitive data. The group has added RBH to its…
3 articles · Updated March 16, 2026
Recent Intelligence Reports
- Payload Ransomware Uses ChaCha20 and Aggressive Anti-Forensics — Socprime · May 26, 2026
- Payload Ransomware claims breach of Royal Bahrain Hospital, threatens data leak — Scworld · March 16, 2026
- Payload Ransomware claims the hack of Royal Bahrain Hospital — Securityaffairs.Co · March 15, 2026