kyber
Activity analysis
HackerFeeds has tracked 1 victims claimed by kyber since March 2026 — ranking #317 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in March 2026. Its most-targeted sector is Government & Defense (1 victims). The United States accounts for 1 victims (100% of those with a known location).
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-03-18 |  L3HARRISl3harris.com | Government & Defense | US |