Babuk

Inactive
Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.
8 Victims
Oct 24, 2020 First Discovered
Jul 27, 2021 Last Discovered
1099 Days Inactive
25% Infostealer
0/1 Sites Online
Top Countries
US 3
FR 1
GB 1
Top Sectors
Retail & E-Commerce 2
Professional Services 2
Transportation 1
Government & Defense 1
Hospitality 1
Healthcare 1
Known Locations (1)
Babuk - Leaks site
nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion
Tools Used
Exfiltration
File[.]io
Intelligence
2 Negotiation Chats
Victims (8)
BridgeMill Athletic Club
US Retail & E-Commerce Discovered: Jul 31, 2023 · Attack est.: Jul 27, 2021
https://www.bridgemillathleticclub.com
spsr-law.com
Professional Services Discovered: Jul 31, 2023 · Attack est.: Jul 7, 2021
The Babuk v2.0 new
E.A. Gibson Shipbrokers
Transportation Discovered: Jul 31, 2023 · Attack est.: Jul 6, 2021
The Babuk 2.0new
Arabian Computer Supplies co.
Professional Services Discovered: Jul 31, 2023 · Attack est.: Jun 21, 2021
The Babuk 2.0 new
4murs.com
FR Retail & E-Commerce Discovered: Jul 31, 2023 · Attack est.: Jun 15, 2021
The Babuk v2.0 new
Washington DC Metropolitan Police Department
US Government & Defense Discovered: Mar 31, 2021 · Attack est.: Mar 31, 2021
Houston Rockets NBA Team
US Hospitality Discovered: Mar 31, 2021 · Attack est.: Mar 31, 2021
Serco
GB Healthcare Discovered: Oct 24, 2020 · Attack est.: Oct 24, 2020
Source: Ransomware.live | Data cached and served by Digital Checkmark IT Services | Ransomware Tracker