Threat Group Profile
ShadowByt3$
Dormant / historical
Victim claims
0
First seen
—
Last activity
—
Tracked since
Feb 2026
Group overview
ShadowByt3$ is a ransomware-as-a-service group first observed in October 2025, using multi-method extortion and communicating via Telegram and Tox, with a very small confirmed victim list suggesting it remains in early-stage operation.
Preferred targets
Agriculture and Food Production · 1
Technology · 1
Most targeted countries
ID · 1
GB · 1