Threat Group Profile
anubis
● Active — last 30 days
Victim claims
26
First seen
Apr 2026
Last activity
03 Jul 2026
Tracked since
Feb 2025
Group overview
Anubis is a ransomware-as-a-service group active since December 2024 that targets healthcare, engineering, construction, and professional services sectors, offering affiliates a flexible revenue split model and an optional destructive "wipe mode" alongside standard encryption.
Preferred targets
Healthcare · 7
Business Services · 5
Manufacturing · 2
Financial Services · 2
Consumer Services · 2
Energy · 2
Most targeted countries
US · 13
GB · 4
FR · 2
CH · 1
DE · 1
AU · 1
