HackerFeeds
All ransomware groups

payload

74 tracked victims
·first seen 2026-02-17·last activity 2026-08-20

Group profile

Payload is a ransomware group that emerged in early 2026, using Babuk-derived source code targeting both Windows and ESXi systems with cross-platform double-extortion attacks against healthcare, energy, real estate, and agriculture sectors, claiming 12 victims across seven countries within hours of launching its leak site.

MITRE ATT&CK TTPs

TA0002

Execution

TA0005

Stealth

  • T1027Obfuscated Files or Information

    RC4-encrypted strings, double-base64 note key

  • T1070.004File Deletion

    Self-delete via NTFS ADS rename ( :payload stream)

  • T1480Execution Guardrails

    Mutex "MakeAmericaGreatAgain"

TA0007

Discovery

  • T1057Process Discovery

  • T1082System Information Discovery

    CPUID for AVX2/SSE2, GetLogicalProcessorInformation

  • T1083File and Directory Discovery

    Recursive traversal via NtQueryDirectoryFile

TA0040

Impact

  • T1486Data Encrypted for Impact

  • T1489Service Stop

    44 services stopped via SCM (backup, AV, database)

  • T1490Inhibit System Recovery

TA0112

Defense Impairment

  • T1685Disable or Modify Tools

Recent victims

showing 50 of 74
DateWebsite / victimSectorCountry
2026-08-20
fh-hwz.ch
Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etcfh-hwz.ch
TechnologyCH
2026-08-13
zaraholding.com
Zara Investment Holdingzaraholding.com
Financial ServicesJO
2026-08-11
B
B&B Hydraulik
ManufacturingDE
2026-08-11
stuecheli.ch
Stücheli Architektenstuecheli.ch
Professional ServicesCH
2026-08-11
B
Baya Technologies
Technology
2026-08-03
kronenberg-gmbh.de
Hans & Jos. Kronenberg GmbHkronenberg-gmbh.de
ManufacturingDE
2026-07-19
ckr.co.za
CKR Consulting Engineersckr.co.za
Professional ServicesZA
2026-07-10
R
Roofinox
Manufacturing
2026-07-09
castries.fr
The commune of Castriescastries.fr
Government & DefenseFR
2026-07-05
E
ENB Versich
Energy & UtilitiesCH
2026-07-05
V
Vela Film S.r.l.
Retail & E-CommerceIT
2026-07-02
T
Tofutown
Agriculture and Food ProductionDE
2026-06-29
V
Villea Hotels in AttanaHo
Hospitality
2026-06-26
clinicalasabana.com
Clínica La Sabanaclinicalasabana.com
HealthcareCR
2026-06-26
softwarearge.com
Software Argesoftwarearge.com
TechnologyTR
2026-06-26
mosaic-partners.com
Mosaic Partnersmosaic-partners.com
Professional ServicesCH
2026-06-20
E
ENB Versicherungen | myenb.ch
Financial ServicesCH
2026-06-20
E
Editora Irmãos Vitale
EducationBR
2026-06-20
P
Preferred Properties
Retail & E-Commerce
2026-06-16
sporton.com.tw
SPORTON International Inc.sporton.com.tw
ManufacturingTW
2026-06-13
myipo.gov.my
myipo.gov.mymyipo.gov.my
Government & DefenseMY
2026-06-08
plazalama.com.do
Plaza Lamaplazalama.com.do
HospitalityDO
2026-06-08
hansoll.com
Hansoll Textile in Vietnamhansoll.com
ManufacturingVN
2026-06-08
villea.attanahotels.com
Villea Hotels in AttanaHotelsvillea.attanahotels.com
HospitalityMY
2026-05-21
gtf-freese.de
G Theodor Freesegtf-freese.de
ManufacturingDE
2026-05-21
asonic-logisticsolutions.com
A-Sonic Logistic Solutionsasonic-logisticsolutions.com
Transportation
2026-05-21
impcullman.com
Internal Medicine and Pediatrics of Cullmanimpcullman.com
HealthcareUS
2026-05-21
R
Robinsons
Retail & E-CommerceSG
2026-05-19
tangsengservices.com
Tang Seng Nitrogen & Pump Systems Pte. Ltd.tangsengservices.com
ManufacturingSG
2026-05-19
elohimlaw.com
Elohim Law Corporationelohimlaw.com
Professional ServicesSG
2026-05-19
K
Kabushiki Gaisha Hodozuka Setsubi
ManufacturingJP
2026-05-13
goreycs.ie
Gorey Community Schoolgoreycs.ie
EducationIE
2026-05-13
inteceng.com.my
Inteceng.com.my (+ Tsksynergy.com.my + Amemanufacturing.com.my + Woodnova.com.my)Inteceng.com.my
ManufacturingMY
2026-04-29
P
PROM (Peakside Ros Outlet Management)
Retail & E-Commerce
2026-04-27
gimli.ca
Rural Municipality of Gimligimli.ca
Government & DefenseCA
2026-04-23
pstbn.com.py
Peroni Sosa Tellechea Burt & Narvajapstbn.com.py
Professional ServicesUY
2026-04-23
meditron.com.ve
meditron.com.vemeditron.com.ve
HealthcareVE
2026-04-23
b3-bruck.at
b3-bruck.atb3-bruck.at
ManufacturingAT
2026-04-23
caravaningcity.com
caravaningcity.comcaravaningcity.com
HospitalityDE
2026-04-20
myjohgroup.com
JOH Investments Limitedmyjohgroup.com
Financial ServicesJM
2026-04-20
B
Better House
Retail & E-Commerce
2026-04-20
alsulaitilawfirm.com
Al Sulaiti Law Firmalsulaitilawfirm.com
Professional ServicesQA
2026-04-16
franziskus-whv.de
Franziskusschule Wilhelmshavenfranziskus-whv.de
EducationDE
2026-04-16
marino.co.in
Marino Food Products Pvtmarino.co.in
Agriculture and Food ProductionLK
2026-04-16
sunlightair.ph
Sunlight Express Airwayssunlightair.ph
TransportationPH
2026-04-16
orientalweavers.com
orientalweavers.comorientalweavers.com
ManufacturingEG
2026-04-16
T
TFE Group
Retail & E-CommerceAU
2026-04-08
E
El Wastani Petroleum Company (WASCO)
Energy & UtilitiesLY
2026-04-03
uf-eg.com
United Finance Egyptuf-eg.com
Financial ServicesEG
2026-04-03
tscherne.info
Tscherne Consulting Steuerberatung GmbHtscherne.info
Financial ServicesAT