Babuk

Inactive

Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.

8 Victims

Oct 24, 2020 First Discovered

Jul 27, 2021 Last Discovered

1905 Days Inactive

0% Infostealer

0/1 Sites Online

Known Locations (1)

Babuk - Leaks site

nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion

Tools Used

Exfiltration

File[.]io

Intelligence

2 Negotiation Chats

Victims (8)

Detailed victim list temporarily unavailable

This group has 8 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.