PayloadBIN is a ransomware strain deployed in 2021 by Evil Corp as a rebranding of their WastedLocker/Hades/Phoenix lineage, specifically designed to evade US Treasury OFAC sanctions by impersonating the unrelated Babuk gang's rebrand rather than operating as an independent group.
This group has 29 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.
Don't let email issues hurt your business reputation.
Our cybersecurity team helps you fix SPF, DKIM, DMARC and protect your sender reputation. Get a free 30-minute consultation with a security expert.
