Threat Group Profile
kairos
Dormant / historical
Victim claims
12
First seen
Apr 2026
Last activity
29 May 2026
Tracked since
—
Group overview
Kairos is a data extortion group active since late 2024 that focuses solely on data theft with no encryption, primarily targeting small-to-mid-sized organizations in healthcare, manufacturing, and business services in the US, purchasing initial access from brokers and demanding Bitcoin payments.
Preferred targets
Healthcare · 3
Public Sector · 2
Business Services · 2
Consumer Services · 2
Construction · 1
Transportation/Logistics · 1
Most targeted countries
US · 5
AU · 3
FR · 1
DE · 1
ES · 1
DK · 1
