HackerFeeds
All ransomware groups

babuk2

180 tracked victims
·first seen 2021-02-01·last activity 2025-04-06

Activity analysis

HackerFeeds has tracked 180 victims claimed by babuk2 since February 2021, most recently in April 2025 — ranking #40 of 332 groups (0.5% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in April 2025. Its most-targeted sector is Public Sector (45 victims), followed by Technology (33). The United States accounts for 34 victims (20% of those with a known location); 8 victims did not disclose a location.

Victims per year

  • 20212
  • 20249
  • 2025169

Top sectors

  • Public Sector45
  • Technology33
  • Healthcare15
  • Manufacturing13
  • Financial Services10
  • Telecommunication7

Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology

Group profile

Babuk Locker 2.0, also known as Bjorka or SkyWave, after failing to make any profit from selling public databases on forums, decided to impersonate Babuk Ransomware group. He launched a blog where he claimed multiple public breaches from BreachForums as ransomware attacks

Recent victims

No victims tracked yet.