Threat Group Profile
kazu
● Active — last 30 days
Victim claims
9
First seen
Aug 2026
Last activity
23 Aug 2026
Tracked since
Nov 2025
Group overview
Kazu is an emerging ransomware group active since September 2025 that employs double-extortion tactics, targeting government, healthcare, and financial organizations primarily in Southeast Asia, the Middle East, and Latin America, with notable claimed breaches including Dubai's Ports, Customs and Free Zone Corporation with 1.94 TB exfiltrated.
Preferred targets
Healthcare · 8
Professional Services · 1
Most targeted countries
US · 2
BR · 2
MX · 2
AR · 1
CA · 1
PK · 1