ms13089 is a ransomware group that emerged in December 2025, primarily motivated by financial gain through data encryption and exfiltration. The group distinguishes itself by employing a double extortion model, threatening to publish sensitive stolen data if ransom demands are not met. Notably, the group named itself after a 2013 Microsoft Security Bulletin, MS13-089. There is limited public information available regarding its specific origin or any notable evolution in its operational structure.

Paises afectados

Sectores atacados