Threat Group Profile
anubis
● Active — last 30 days
Victim claims
41
First seen
Apr 2026
Last activity
21 Aug 2026
Tracked since
Feb 2025
Group overview
Anubis is a ransomware-as-a-service group active since December 2024 that targets healthcare, engineering, construction, and professional services sectors, offering affiliates a flexible revenue split model and an optional destructive "wipe mode" alongside standard encryption.
Preferred targets
Healthcare · 12
Business Services · 6
Manufacturing · 4
Financial Services · 3
Consumer Services · 3
Energy · 2
Most targeted countries
US · 24
GB · 4
FR · 3
DE · 2
CH · 1
AU · 1