Kairos

Active

Kairos is a data extortion group active since late 2024 that focuses solely on data theft with no encryption, primarily targeting small-to-mid-sized organizations in healthcare, manufacturing, and business services in the US, purchasing initial access from brokers and demanding Bitcoin payments.

101 Victims

Jun 25, 2024 First Discovered

Oct 13, 2026 Last Discovered

18 Days Inactive

0% Infostealer

1/3 Sites Online

Known Locations (3)

Kairos

kairosgeuzkzz3ajntqcyxl3ib36szz3mg62mb3zbui33pbk3uzo4qqd.onion

SBU

nerqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion

erqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion

Intelligence

1 Negotiation Chats

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (101)

Detailed victim list temporarily unavailable

This group has 101 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.