Payouts King Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
9
occurrences
First Seen
April 17, 2026
Last Seen
July 28, 2026

Related Threat Clusters

  • Payouts King Ransomware Uses Edgecution Malware via Malicious Edge Extension

    A new ransomware campaign linked to the Payouts King group employs a malicious Microsoft Edge extension called 'Edgecution' to exploit the Chrome native messaging protocol. This attack allows the malware to escape the…

    7 articles · Updated June 24, 2026
  • Microsoft Teams Vishing Campaign Deploys GoGRPC Backdoor

    A vishing campaign utilizing Microsoft Teams has been identified, targeting organizations through fake IT support calls. Attackers persuade victims to open Quick Assist links, enabling remote access to systems. The…

    4 articles · Updated July 28, 2026
  • SunSource Data Breach Exposes Sensitive Personal Information

    SunSource Borrower LLC suffered a data breach from March 31 to April 5, 2026, when an unauthorized third party accessed part of its network. The ransomware group Payouts King claimed responsibility for the attack,…

    2 articles · Updated June 19, 2026
  • Eyemart Express Ransomware Attack Exposes Sensitive Customer Data

    Eyemart Express has reported a significant ransomware attack that compromised sensitive data of customers and employees. The breach, attributed to the ransomware group Payouts King, involved the exfiltration of…

    2 articles · Updated April 20, 2026
  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1877 articles · Updated February 12, 2026

Recent Intelligence Reports

  • Helpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC Backdoor - Zscaler, Inc. — Zscaler · July 28, 2026
  • Edgecution malware exploits browser native messaging to bypass sandboxes — Feeds.4Sysops · June 25, 2026
  • Payouts King Initial Access Broker Deploys Edgecution Malware Through Malicious Edge Extension — Gbhackers · June 24, 2026
  • Payouts King Ransomware Initial Access Broker Deploys New Edgecution Malware — Zscaler · June 23, 2026
  • SunSource Data Breach Exposes SSNs and Medical Records — Claimdepot · June 18, 2026
  • Eye1776458202 Eyemart Express Eyewear Express Ransomware March 2026 — blog.rankiteo.com · April 20, 2026
  • Payouts King Rises as New Ransomware Threat Linked to Former BlackBasta Affiliates — Cybersecuritynews · April 17, 2026
  • Payouts King Emerges: New Ransomware Operation Tied to Ex — Gbhackers · April 17, 2026

CVSS v3.1 Breakdown