Threat Group Profile
abyss
Dormant / historical
Victim claims
3
First seen
May 2026
Last activity
01 Jun 2026
Tracked since
Mar 2023
Group overview
Abyss (also known as Abyss Locker) is a ransomware operation first identified in March 2023, derived from the Babuk source code, that targets Windows and Linux/VMware ESXi systems using double-extortion tactics across healthcare, manufacturing, finance, and technology sectors — predominantly in North America.
Preferred targets
Business Services · 1
Public Sector · 1
Technology · 1
Most targeted countries
DE · 1
US · 1