Osiris

Inactive
Osiris is a ransomware-as-a-service operation first observed in November 2025 that uses a Bring Your Own Vulnerable Driver (BYOVD) technique to disable endpoint detection tools before deploying hybrid ECC + AES-128-CTR encryption; Symantec researchers linked its operators to former INC ransomware affiliates.
2 Victims
Dec 9, 2025 First Discovered
Jan 8, 2026 Last Discovered
159 Days Inactive
0% Infostealer
0/1 Sites Online
Top Countries
US 1
PH 1
Top Sectors
Manufacturing 1
Hospitality and Tourism 1
Known Locations (1)
Osiris
osirisbm3357xrccnid23nlyuqwzbgqheaei6dxvyi34tbkqr3bmvfid.onion
Victims (2)
American Vanguard
US Manufacturing Discovered: Jan 9, 2026 · Attack est.: Jan 8, 2026
American Vanguard Corporation is a U.S.-based company specializing in agricultural chemicals, primarily focused on crop protection products like herbicides, insecticides, fungicides, and fumigants. Founded in 1969 and headquartered in Newport...
The Araneta Group
PH Hospitality and Tourism Discovered: Dec 18, 2025 · Attack est.: Dec 9, 2025
The Araneta Group is a private, diversified conglomerate in the Philippines — active in property development, food service, leisure & entertainment, and hospitality — and is composed of five main...