Threat Group Profile
krybit
● Active — last 30 days
Victim claims
70
First seen
Apr 2026
Last activity
08 Jul 2026
Tracked since
Apr 2026
Group overview
Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.
Preferred targets
Business Services · 13
Technology · 11
Consumer Services · 7
Manufacturing · 6
Public Sector · 5
Healthcare · 4
Most targeted countries
MX · 7
DE · 7
BR · 4
TW · 4
ES · 4
TH · 3
