ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
cry0
3 incidentes
2 paises
3 sectores
threat-actor KP Ultimo: 2026-06-29
cry0 is a ransomware-as-a-service (RaaS) operation that first emerged in March 2026, recruiting affiliates via underground forums. The group employs a payload written in Rust and leverages blockchain-based negotiation infrastructure, specifically the Internet Computer Protocol, to enhance its resilience against law enforcement disruption. A key characteristic of cry0 is its affiliate program, which offers a 90/10 revenue split. The group is distinct in its use of innovative communication methods designed to evade takedowns.
Actores similares
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| Foro | unknown | ransomware.anggipradana.com | Ransomware Group: cry0 |
| DLS / onion | offline | cryoblogedawivdcknyd4jsjxkrx3xrqqltxla6wwjjnzm3f3jaxjzqd.onion | CTI.FYI |
| DLS / onion | offline | pwn3dky35tub4ktj5bolc72oezg6qc3jvmbogaiwwkimiqtbbokyhrid.onion | CTI.FYI |
Paises afectados
United States (1)Paises objetivo (OSINT)
Canada
China
Germany
United Kingdom
India
Italy
Latvia
Mexico
Romania
Russian FederationSectores atacados
Law (1)
Software (1)
Transportation/Logistics (1)
Sectores objetivo (OSINT)
Other Information ServicesRail TransportationSoftware PublishersHospitalsManufacturingPublic AdministrationEducational ServicesData Processing ServicesSpace & DefenseEnergy & Utilities