Kyber

Inactive

Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.

1 Victims

Mar 17, 2026 First Discovered

Mar 17, 2026 Last Discovered

228 Days Inactive

0% Infostealer

0/1 Sites Online

Known Locations (1)

CAPTCHA Verification

kyblogtz6k3jtxnjjvluee5ec4g3zcnvyvbgsnq5thumphmqidkt7xid.onion

Intelligence

📄 1 Ransom Notes
View the actual ransom notes used by this group →

Victims (1)

Detailed victim list temporarily unavailable

This group has 1 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.