Kazu

Inactive

Kazu is an emerging ransomware group active since September 2025 that employs double-extortion tactics, targeting government, healthcare, and financial organizations primarily in Southeast Asia, the Middle East, and Latin America, with notable claimed breaches including Dubai's Ports, Customs and Free Zone Corporation with 1.94 TB exfiltrated.

20 Victims

Nov 5, 2025 First Discovered

Sep 7, 2026 Last Discovered

55 Days Inactive

0% Infostealer

0/5 Sites Online

Known Locations (5)

kazuuyscnd6emsrzkpelzxgxvro2wgrngku4g7btuunsandnjv5f52ad.onion

kazu7japbm72xaxqnjhajlvkuo4czf2q5ye7ucc4fmyjpgunc6ggezyd.onion

kazusemtykpxnnosg3gp56spcdkg7tro6ozei7ikamdgnwpwpbwagbyd.onion

kazu2x7vux5gmbrrqnbujbpe5njyqua5ulixubfcf64qae7qbvce4gqd.onion

Ransom - KAZU

6czlbd2jfiy6765fbnbnzuwuqocg57ebvp3tbm35kib425k4qnmiiiqd.onion

Victims (20)

Detailed victim list temporarily unavailable

This group has 20 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.