All ransomware groups
kyber
1 tracked victims
·first seen 2026-03-18·last activity 2026-03-18Group profile
Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-03-18 | L3HARRISl3harris.com | Government & Defense | US |

