ShadowByt3$

Inactive

ShadowByt3$ is a ransomware-as-a-service group first observed in October 2025, using multi-method extortion and communicating via Telegram and Tox, with a very small confirmed victim list suggesting it remains in early-stage operation.

21 Victims

Feb 17, 2026 First Discovered

Sep 16, 2026 Last Discovered

45 Days Inactive

0% Infostealer

0/6 Sites Online

Known Locations (6)

Leaks

mfbbt65kir2drc7tuoukwibikgvxquauscnzgbeltkmidjtgqlzm2qad.onion

ShadowByt3$

shadowbyt3s.8bit.ca

SB Group

52rtvdymcqvebbamd3la3wtu3ofrcuzuzja3vrsu6wiyrq223osptzqd.onion

sdwbytqeb664krp2wz2qs3lxxah2rhneuotot5hy7g4jpn2pindigcad.onion

SB Data Leak Site

shdwbt3ja2ptjt6poluegas44i35727lgmoqqquoww642x3zyocyhuqd.onion

SB Leaks

sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion

Victims (21)

Detailed victim list temporarily unavailable

This group has 21 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.