Threat Group Profile
cry0
● Active — last 30 days
Victim claims
1
First seen
Aug 2026
Last activity
06 Aug 2026
Tracked since
Jan 2026
Group overview
Cry0 is a ransomware-as-a-service operation that recruits affiliates via underground forums, using a Rust-written payload with blockchain-based (Internet Computer Protocol) negotiation infrastructure to resist law enforcement takedowns and offering affiliates a 90/10 revenue split.
Preferred targets
Retail & E-Commerce · 1
Most targeted countries
US · 1